4 matches found
CVE-2004-1273
Buffer overflow in the DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a long filename...
CVE-2004-1273
CVE-2004-1273 affects greed (0.81p) and is a buffer overflow in DownloadLoop (main.c). The vulnerability arises from using strcat to copy a long input filename into a 128-byte COMMAND buffer and then passing that filename to system() without sanitization, enabling remote code execution via a GRX ...
CVE-2004-1274
The CVE-2004-1274 entry concerns greed 0.81p. The vulnerability is tied to the DownloadLoop function in main.c, which can be triggered by processing a GRX file that contains a filename with shell metacharacters. The underlying issue is a buffer/command handling flaw: DownloadLoop uses strcat to c...
