CVE-2004-1192

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-11936.6Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\pCVE-2004-11945.0Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a lonCVE-2004-11955.0Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a join request that contCVE-2004-11966.8Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web script or HTML via thCVE-2004-11976.8Cross-site scripting (XSS) vulnerability in inshop.pl in Insite inShop allows remote attackers to inject arbitrary web script or HTML via thCVE-2004-11985.0Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consumption), as demonstrateCVE-2004-11995.0Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrCVE-2004-12005.0Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using JCVE-2004-12015.0Opera 7.54 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using JavascriptCVE-2004-12026.8Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote CVE-2004-12035.0parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via CVE-2004-12042.1FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman with a long -title v