Lucene search

MitreCVE-2004-1290

HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1290

2005-01-1005:00:00

mitre

web.nvd.nist.gov

cve-2004-1290

buffer overflow

remote code execution

pgn2web

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.029

Percentile

90.8%

JSON

Buffer overflow in the process_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary code via a crafted PGN file.

Affected configurations

Nvd

Node

william_hoggarthpgn2webMatch0.3

VendorProductVersionCPE
william_hoggarthpgn2web0.3cpe:2.3:a:william_hoggarth:pgn2web:0.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
william_hoggarth	pgn2web	0.3	cpe:2.3:a:william_hoggarth:pgn2web:0.3:::::::*

References

tigger.uic.edu/~jlongs2/holes/pgn2web.txt

exchange.xforce.ibmcloud.com/vulnerabilities/18554

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.029

Percentile

90.8%

JSON

Related for CVE-2004-1290