CVE-2004-1304
NoneCVSS
—
EPSS
11.4%
Published
Jan 10, 2005
CISA due date
—
The record
Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | file | 0 | 4.12 |
| Debian:12 | file | 0 | 4.12 |
| Debian:13 | file | 0 | 4.12 |
Related vulnerabilities
- CVE-2014-3710 The donote function in readelf.c in file through 5.20, as used in the Fileinfo component… Also affects file
- CVE-2014-3587 Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as… Also affects file
- CVE-2014-3480 The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo… Also affects file
- CVE-2014-3478 Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in… Also affects file
- CVE-2014-3487 The cdf_read_property_info function in file before 5.19, as used in the Fileinfo… Also affects file
- CVE-2014-3479 The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the… Also affects file
- CVE-2014-0207 The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo… Also affects file
- CVE-2014-3538 file before 5.19 does not properly restrict the amount of data read during a regex… Also affects file