CVE-2004-0414 in CVS

Summary

cvs 1.12.x through 1.12.8 and 1.11.x through 1.11.16 does not properly handle malformed "entry" lines which prevents a null terminator from being used and may lead to a denial of service (crash) modification of critical program data or arbitrary code execution.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 04/16/2004
• Disclosure: 08/06/2004
• Moderation: VulDB entry created
• Entries: VDB-22017 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• Exploit: Download
• CVSS: 10.0
• EPSS: 0.05252
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0414
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0414
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0414/