VDB
CVE-2004-0947
CVE-2004-0947
PUBLISHED
CVSS 10 CRITICAL
Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.
EPSS 7.37% · 94.3th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
7.37%
94.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| suse | suse_linux | 9.0, 9.2, 9.1 |
| n/a | n/a | n/a |
| gentoo | linux | |
| arj_software_inc. | unarj | 2.65, 2.64, 2.63_a |
Timeline
- Nov 24, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
References
- 11665 vdb
- GLSA-200411-29 vendor-advisory
- http://lwn.net/Articles/121827/ technical
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18044 technical
- http://www.debian.org/security/2005/dsa-652 technical
- https://nvd.nist.gov/vuln/detail/CVE-2004-0947 advisory
- http://lwn.net/Articles/121827 url
- http://www.redhat.com/support/errata/RHSA-2005-007.html url