Lucene search
HistoryAug 18, 2005 - 4:00 a.m.
CVE-2004-2433
cve-2004-2433
buffer overflow
adm activex
remote code execution
altnet download manager
kazaa
grokkster
8 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.075 Low
EPSS
Percentile
94.1%
Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter.
Affected configurations
Node
altnetaltnet_download_managerRange≤4.0.0.2
ORaltnetaltnet_download_managerMatch4.0.0.4
ORgrokstergroksterMatch1.3
ORgrokstergroksterMatch1.3.3
ORgrokstergroksterMatch2.6
ORkazaakazaa_media_desktopMatch1.3
ORkazaakazaa_media_desktopMatch1.3.1
ORkazaakazaa_media_desktopMatch1.3.2
ORkazaakazaa_media_desktopMatch1.6.1
ORkazaakazaa_media_desktopMatch2.0
ORkazaakazaa_media_desktopMatch2.0.2
ORkazaakazaa_media_desktopMatch2.6.4
Related
kaspersky
kaspersky
KLA10061 ACE vulnerability in Kazaa & Grokster
2004-12-31 00:00:00
nvd
nvd
CVE-2004-2433
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-2433
2005-08-18 04:00:00
8 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.075 Low
EPSS
Percentile
94.1%
Related for CVE-2004-2433