CVE-2004-1282 Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary code via a crafted message that is not properly handled during a Reply operation.
HighCVSS 10.0
EPSS 9.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary code via a crafted message that is not properly handled during a Reply operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linpopup | = 1.2 | No fix listed |
References
- tigger.uic.edu exploit vendor-advisory
- DSA-632 vendor-advisory
- linpopup-strexpand-bo(18627) vdb-entry