CVE-2004-0416
NoneCVSS
—
EPSS
13.2%
Published
Aug 6, 2004
CISA due date
—
The record
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | cvs | 0 | 1:1.12.9-1 |
| Debian:12 | cvs | 0 | 1:1.12.9-1 |
| Debian:13 | cvs | 0 | 1:1.12.9-1 |
| Debian:3.0 | cvs | 0 | 1.11.1p1debian-9woody7 |
| Red Hat:enterprise_linux:3::as | cvs | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::as | cvs-debuginfo | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::desktop | cvs | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::desktop | cvs-debuginfo | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::es | cvs | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::es | cvs-debuginfo | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::ws | cvs | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::ws | cvs-debuginfo | 0 | 0:1.11.2-24 |
Related vulnerabilities
- CVE-2004-0396 Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when… Also affects cvs
- CVE-2003-0015 Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a… Also affects cvs
- CVE-2026-13573 A vulnerability was found in llvm llvm-project up to 22.1.6. CWE-119
- CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. CWE-119
- CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. CWE-119
- CVE-2026-12805 A flaw has been found in OFFIS DCMTK up to 3.7.0. CWE-119
- CVE-2026-42488 Some shadow paging errors paths will switch the page-tables without updating the… CWE-119
- CVE-2026-12327 Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… CWE-119