CVE-2004-1072 PUBLISHED CVSS 7.199999809265137 HIGH

The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.

EPSS 0.07% · 21.4th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.07%
21.4th percentile

Affected Products

VendorProductVersions
trustixsecure_linux2.2, 2.1, 2.0
redhatlinux_advanced_workstation2.1, 2.1
susesuse_linux9.0, 9.0, 9.0
linuxlinux_kernel2.4.2, 2.4.3, 2.4.4
redhatfedora_corecore_2.0, core_3.0
n/an/an/a
turbolinuxturbolinux_server10.0
redhatenterprise_linux_desktop3.0
redhatenterprise_linux3.0, 2.1, 2.1

Timeline

References

…and 2 more

Open in Interactive Console →