Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2003-1432

Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.

  • Published: Dec 31, 2003
  • Updated: Apr 13, 2023
  • CVE: CVE-2003-1432
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
epic_games / unreal_engine 436 436.x
epic_games / unreal_tournament_2003 2199_linux 2199_linux.x
epic_games / unreal_tournament_2003 2199_win32 2199_win32.x
epic_games / unreal_engine 226f 226f.x
epic_games / unreal_tournament_2003 demo_version_2206_linux demo_version_2206_linux.x
epic_games / unreal_engine 433 433.x
epic_games / unreal_tournament_2003 demo_version_2206_win32 demo_version_2206_win32.x