CVE-2004-2719

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrary code via a mail message with a long From field, a different issue than CVE-2005-0339.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/11231Patch, Vendor Advisory
http://www.securityfocus.com/bid/9954Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15640
https://www.exploit-db.com/exploits/164
http://secunia.com/advisories/11231Patch, Vendor Advisory
http://www.securityfocus.com/bid/9954Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15640
https://www.exploit-db.com/exploits/164

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-27204.3Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary CVE-2004-27214.3The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows re CVE-2004-27222.1Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original r CVE-2004-27232.1NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.CVE-2004-27247.1LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a us CVE-2004-27254.3Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1)CVE-2004-27265.0HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attacke CVE-2004-27274.3Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (appli CVE-2004-27283.5Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service (a CVE-2004-27294.4Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for CVE-2004-27304.6Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03 CVE-2004-27314.4Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, an