CVE-2004-1805: epic games unreal engine

EPSS trend

Probability

6.45%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.45% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.45%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (aluigi.altervista.org)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedosmultipleVerified
Epic Games Unreal Tournament Server 436.0 - Engine Remote Format String
Maturity: poc

References

6 links

exchange.xforce.ibmcloud.com/vulnerabilities/15430VDB EntryX Refsource XF
marc.info?l=bugtraq&m=107893764406905&w=2Mailing ListX Refsource BUGTRAQ
aluigi.altervista.org/adv/unrfs-adv.txtX Refsource MISCExploit
secunia.com/advisories/11108Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/9840VDB EntryX Refsource BIDExploitPatch
marc.info?l=bugtraq&m=107902755204583&w=2Mailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2026-14765epic gamesunreal engine0.39%5d ago14-10-2026 02:31Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL). The URL scheme filter (FURLRequestFilter) is empty by default, which permits all URL schemes. On Windows, this results in a call to ShellExecuteW() with the open verb, so a supplied file:/// URI causes the referenced file to be executed. Any Unreal Engine game that loads user-generated content containing Blueprints is vulnerable to command execution via a malicious local file or a remote file on a WebDAV share. This is an instance of CWE-1188 (Initialization of a Resource with an Insecure Default).CVE-2003-1431epic gamesunreal engine5.24%19y ago23-10-2007 01:00Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL.CVE-2003-1432epic gamesunreal engine+17.54%19y ago23-10-2007 01:00Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.CVE-2003-1430epic gamesunreal engine2.80%19y ago23-10-2007 01:00Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL.CVE-2003-1433epic gamesunreal engine1.18%19y ago23-10-2007 01:00Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.CVE-2007-4442epic gamesunreal engine3.84%19y ago21-08-2007 00:00Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.

All vulnerabilities inunreal engine

CVE-2004-1805: epic games unreal engine

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References