CVEブラウザに戻る

CVE-2004-1299

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1430%

EPSS Percentile23.97th

Published2005年1月10日

Last Modified2026年4月16日

Vulnerability Description

Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web page.

Affected Platforms (CPE)

📦

Vilistextum

Vilistextum

= 2.6.6

References & Advisories

🔗 http://tigger.uic.edu/~jlongs2/holes/vilistextum.txt

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18610

🔗 http://tigger.uic.edu/~jlongs2/holes/vilistextum.txt

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18610

関連する脆弱性情報

CVE-2006-565710.0

Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.

CVE-2006-56565.0

Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a denial of serv...

CVE-2004-090410.0

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird...

CVE-2004-129010.0

Buffer overflow in the process_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary code via a...