CVE-2004-0262 Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.
HighCVSS 10.0
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| the palace client | = 3.5 | No fix listed |
References
- 20040207 The Palace 3.x (Client) Stack Overflow Vulnerability mailing-list
- 20040207 The Palace 3.x (Client) Stack Overflow Vulnerability mailing-list
- www.elitehaven.net
- 9602 vdb-entry vendor-advisory
- palace-server-address-bo(15074) vdb-entry