CVE-2004-0964 Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
HighCVSS 10.0
EPSS 62.7%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zinf | = 2.2.1 | No fix listed |
| debian linux | = 3.0 | No fix listed |
References
- 20040924 Buffer overflow in Zinf 2.2.1 for Win32 mailing-list
- 20040927 Re: Buffer overflow in Zinf 2.2.1 for Win32+exploit mailing-list
- 12656 third-party-advisory
- 8341 third-party-advisory
- DSA-587 patch vendor-advisory
- 11248 exploit patch vdb-entry vendor-advisory
- zinf-pls-bo(17491) vdb-entry