Lucene search
HistoryJul 27, 2004 - 4:00 a.m.
CVE-2004-0733
cve
format string vulnerability
ollydbg 1.10
denial of service
remote attackers
execute arbitrary code
nvd
8.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.091 Low
EPSS
Percentile
94.6%
Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are directly provided to the OutputDebugString function call.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ollydbg:ollydbg | ollydbg | eq | 1.0.8b |
| ollydbg:ollydbg | ollydbg | eq | 1.0.9 |
| ollydbg:ollydbg | ollydbg | eq | 1.0.6 |
| ollydbg:ollydbg | ollydbg | eq | 1.10 |
8.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.091 Low
EPSS
Percentile
94.6%