CVE-2004-1288

Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary code via a crafted SXW file.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2005-01-10

Last modified

2024-08-08

Affected products

• O3read (Siag)

References

• http://tigger.uic.edu/~jlongs2/holes/o3read.txt
• http://www.gentoo.org/security/en/glsa/glsa-200501-20.xml
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18547