CVE-2004-1373

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:linux:*:*:*:*:*
cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:mac_os_x:*:*:*:*:*
cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:win32:*:*:*:*:*

History

No history.

Information

Published : 2004-12-23 05:00

Updated : 2023-12-10 10:17


NVD link : CVE-2004-1373

Mitre link : CVE-2004-1373

CVE.ORG link : CVE-2004-1373


JSON object : View

Products Affected

nullsoft

  • shoutcast_server