Login Request a demo
Unscored severity · published Dec 31, 2003
CVE-2003-1433
Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times
–
CVSS
1.2%
EPSS
No
On KEV
Description
Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UE
Unreal Engine · Epic Games
226f; 433; 436 · source: NVD
Affected product
UE
Unreal Engine
Epic Games
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1433
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1433
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html
www.pivx.com
http://www.pivx.com/luigi/adv/ueng-adv.txt
www.securityfocus.com
http://www.securityfocus.com/bid/6771
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11304
More from Unreal Engine
7.7
CVE-2026-14765
Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL
–
CVE-2007-4442
Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of…
–
CVE-2007-4443
The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a…
–
CVE-2004-1805
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via…
–
CVE-2004-1958
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via