Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-1094
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1094

2005-01-1005:00:00
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.847 High

EPSS

Percentile

98.5%

JSON

Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products. NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.

Affected configurations

NVD
Node
checkmarkcheckmark_payrollRange≤3.9.6
OR
checkmarkcheckmark_payrollMatch3.7.5
OR
checkmarkcheckmark_payrollMatch3.9.1
OR
checkmarkcheckmark_payrollMatch3.9.2
OR
checkmarkcheckmark_payrollMatch3.9.3
OR
checkmarkcheckmark_payrollMatch3.9.4
OR
checkmarkcheckmark_payrollMatch3.9.5
OR
checkmarkmultiledgerRange≤7.0.1
OR
checkmarkmultiledgerMatch6.0.3
OR
checkmarkmultiledgerMatch6.0.5
OR
checkmarkmultiledgerMatch7.0.0
OR
innermediadynazip_libraryMatch5.00.00
OR
innermediadynazip_libraryMatch5.00.01
OR
innermediadynazip_libraryMatch5.00.02
OR
innermediadynazip_libraryMatch5.00.03
OR
realnetworksrealone_playerMatch1.0
OR
realnetworksrealone_playerMatch2.0
OR
realnetworksrealplayerMatch10.0
OR
realnetworksrealplayerMatch10.0_6.0.12.690
OR
realnetworksrealplayerMatch10.0_beta
OR
realnetworksrealplayerMatch10.5
OR
realnetworksrealplayerMatch10.5_6.0.12.1016_beta
OR
realnetworksrealplayerMatch10.5_6.0.12.1040
OR
realnetworksrealplayerMatch10.5_6.0.12.1053

References

Related

cve 3
cvelist 3
saint 4
checkpoint_advisories 2
nvd 2
securityvulns 3
nessus 2
cert 2
kaspersky 1
cve
cve
CVE-2004-1094
2005-01-10 05:00:00
CVE-2004-0575
2004-11-03 05:00:00
CVE-2005-2630
2005-11-18 23:03:00
cvelist
cvelist
CVE-2004-1094
2004-12-01 05:00:00
CVE-2004-0575
2004-10-16 04:00:00
CVE-2005-2630
2005-11-18 23:00:00
saint
saint
Windows compressed folders buffer overflow
2006-05-15 00:00:00
Windows compressed folders buffer overflow
2006-05-15 00:00:00
Windows compressed folders buffer overflow
2006-05-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Compressed Folder Exploit Download Code Execution - Ver2 (CVE-2004-0575)
2014-04-16 00:00:00
RealNetworks RealPlayer Remote Code Execution (CVE-2004-1094) - Ver2
2018-06-28 00:00:00
nvd
nvd
CVE-2004-0575
2004-11-03 05:00:00
CVE-2005-2630
2005-11-18 23:03:00
securityvulns
securityvulns
Microsoft Security Bulletin MS04-034 Vulnerability in Compressed (zipped) Folders Could Allow Remote Code Execution (873376)
2004-10-13 00:00:00
McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability
2006-03-30 00:00:00
dtSearch DUNZIP32.dll Buffer Overflow Vulnerability
2005-12-21 00:00:00
nessus
nessus
MS04-034: Vulnerability in zipped folders may allow code execution (873376)
2004-10-12 00:00:00
RealPlayer Skin File Remote Buffer Overflow
2004-11-23 00:00:00
cert
cert
Microsoft Windows processing of zip files contains a buffer overflow
2004-10-13 00:00:00
InnerMedia DynaZip library vulnerable to buffer overflow via long file names
2004-11-22 00:00:00
kaspersky
kaspersky
KLA10415 ACE vulnerability in multiple software
2005-01-10 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.847 High

EPSS

Percentile

98.5%

JSON
Related for NVD:CVE-2004-1094
cve3cvelist3saint4checkpoint_advisories2nvd2securityvulns3nessus2cert2kaspersky1