Lucene search

K
cveMitreCVE-2004-2710
HistoryOct 06, 2007 - 9:00 p.m.

CVE-2004-2710

2007-10-0621:00:00
CWE-119
mitre
web.nvd.nist.gov
19
cve-2004-2710
gyach enhanced
buffer overflows
denial of service
arbitrary code
security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

High

EPSS

0.029

Percentile

91.0%

Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) sending certain typing statuses or (2) setting the chat room status bar to the current chat room name.

Affected configurations

Nvd
Node
phrozensmokegyach_enhancedRange1.0.2
VendorProductVersionCPE
phrozensmokegyach_enhanced*cpe:2.3:a:phrozensmoke:gyach_enhanced:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

High

EPSS

0.029

Percentile

91.0%

Related for CVE-2004-2710