返回 CVE 瀏覽器

CVE-2004-1485

HIGH

7.5

CVSS Severity Score

EPSS Score0.1190%

EPSS Percentile1.74th

Published2004年12月31日

Last Modified2026年4月16日

Vulnerability Description

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=109882085912915&w=2

🔗 http://www.securityfocus.com/bid/11527

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/17878

🔗 http://marc.info/?l=bugtraq&m=109882085912915&w=2

🔗 http://www.securityfocus.com/bid/11527

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/17878

相關漏洞威脅

CVE-2004-090410.0

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird...

CVE-2004-129010.0

Buffer overflow in the process_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary code via a...

CVE-2004-100610.0

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via cer...

CVE-2004-101210.0

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arb...

CVE-2004-1485 Detail & Impact Analysis | CVSS 7.5 (HIGH) | Cyber-Sec.Space | Cyber-Sec.Space