Back to CVE Browser

CVE-2004-2299

HIGH

7.5

CVSS Severity Score

EPSS Score0.1280%

EPSS Percentile22.21th

PublishedDec 31, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://www.osvdb.org/12944

🔗 http://www.securityfocus.com/archive/1/363651

🔗 http://www.securityfocus.com/bid/10376

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/16190

🔗 http://www.osvdb.org/12944

🔗 http://www.securityfocus.com/archive/1/363651

🔗 http://www.securityfocus.com/bid/10376

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/16190

Related Vulnerabilities

CVE-2004-090410.0

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird...

CVE-2004-101210.0

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arb...

CVE-2004-041810.0

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow ...

CVE-2004-105010.0

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME a...