CVE-2004-0453 Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format str...
HighCVSS 7.2
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vice | = 1.6 | No fix listed |
| vice | = 1.13 | No fix listed |
| vice | = 1.14 | No fix listed |
| debian/vice(Debian:12) | < 1.14-2 | 1.14-2 |
| debian/vice(Debian:12) | = 0.13.0-2 | No fix listed |
| debian/vice(Debian:12) | = 0.14.2.75-2 | No fix listed |
| debian/vice(Debian:12) | = 1.0-3 | No fix listed |
| debian/vice(Debian:12) | = 1.0-3.0.1 | No fix listed |
| debian/vice(Debian:12) | = 1.8.0-1 | No fix listed |
| debian/vice(Debian:13) | < 1.14-2 | 1.14-2 |
| debian/vice(Debian:13) | = 0.13.0-2 | No fix listed |
| debian/vice(Debian:13) | = 0.14.2.75-2 | No fix listed |
| debian/vice(Debian:13) | = 1.0-3 | No fix listed |
| debian/vice(Debian:13) | = 1.0-3.0.1 | No fix listed |
| debian/vice(Debian:13) | = 1.8.0-1 | No fix listed |
| debian/vice(Debian:14) | < 1.14-2 | 1.14-2 |
| debian/vice(Debian:14) | = 0.13.0-2 | No fix listed |
| debian/vice(Debian:14) | = 0.14.2.75-2 | No fix listed |
| debian/vice(Debian:14) | = 1.0-3 | No fix listed |
| debian/vice(Debian:14) | = 1.0-3.0.1 | No fix listed |
| debian/vice(Debian:14) | = 1.8.0-1 | No fix listed |
References
- 20040614 VICE emulator format string vulnerability mailing-list
- 10543 patch vdb-entry vendor-advisory
- vice-memory-dump-format-string(16404) vdb-entry
- Debian Security Tracker CVE-2004-0453 vendor-advisory