First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2004-1569

MediumCVSS 4.0/10Last modified Jun 16, 2026

Description

Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPowerAmp Music Converter 10.0 allows remote attackers to cause a denial of service or execute arbitrary code via a .pls or .m3u playlist that contains long File1 (filename) fields.

Metrics

CVSS 2.0 4.0/10AV:N/AC:H/Au:N/C:N/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-15707.5SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter.CVE-2004-15715.0AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) o CVE-2004-15725.0AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote att CVE-2004-15737.2The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arb CVE-2004-15747.5Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first fie CVE-2004-15755.0The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XM CVE-2004-15765.0Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (applicati CVE-2004-15775.0index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in a CVE-2004-15784.3Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script CVE-2004-15795.0index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, whic CVE-2004-15807.5SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id paramete CVE-2004-15815.0BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3)

CVE-2004-1569: Medium severity, CVSS 4.0 | Vulnix