CVE-2004-1892

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=108100987429960&w=2
http://secunia.com/advisories/11289Patch
http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22Patch, Vendor Advisory
http://www.securityfocus.com/bid/10039Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15730
http://marc.info/?l=bugtraq&m=108100987429960&w=2
http://secunia.com/advisories/11289Patch
http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22Patch, Vendor Advisory
http://www.securityfocus.com/bid/10039Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15730

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-18935.0Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the w CVE-2004-18942.1TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlink attack on texutil.CVE-2004-18952.1YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies.CVE-2004-18967.6Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttr CVE-2004-18975.0Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Bas CVE-2004-189810.0Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a CVE-2004-18995.0The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 CVE-2004-19007.5Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitra CVE-2004-19015.5Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.CVE-2004-19022.1The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately CVE-2004-190310.0Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an object tag.CVE-2004-19047.5Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property fo