critical10.0Public exploit code
CVE-2004-0964
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain valu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zinf Audio Player 2.2.1 - '.pls' Local Buffer Overflow (DEP Bypass)2011-08-03 · local · windows · Verified
- Zinf Audio Player 2.2.1 - '.pls' Local Stack Buffer Overflow (Metasploit)2010-11-24 · local · windows · Verified
- Zinf Audio Player 2.2.1 - '.pls' Universal Overwrite (SEH)2009-03-23 · local · windows · Verified
- Zinf Audio Player 2.2.1 - '.pls' Universal Local Buffer Overflow2009-01-28 · local · windows · Verified
- Zinf Audio Player 2.2.1 - '.pls' Stack Overflow (PoC)2009-01-27 · dos · windows · Verified
- Zinf Audio Player 2.2.1 - Local Buffer Overflow2004-09-28 · local · windows · Verified
Impact
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zinf | Zinf | Version 2.2.1 |
| Debian | Debian Linux | Version 3.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109608092609200&w=2
- http://marc.info/?l=bugtraq&m=109638486728548&w=2
- http://secunia.com/advisories/12656
- http://securityreason.com/securityalert/8341
- http://www.debian.org/security/2004/dsa-587
- http://www.securityfocus.com/bid/11248
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17491
- http://marc.info/?l=bugtraq&m=109608092609200&w=2
- http://marc.info/?l=bugtraq&m=109638486728548&w=2
- http://secunia.com/advisories/12656
- http://securityreason.com/securityalert/8341
- http://www.debian.org/security/2004/dsa-587
- http://www.securityfocus.com/bid/11248
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17491