CVE-2004-0238

Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute...

7.2 HighPublic exploit

Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function.

Exploit likelihood

5.16%Down 1.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Record: CVE-2004-0238
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2004-0238
Updated: 2026-11-02

EUVDEUVD-2004-0238 No score

Record: EUVD-2004-0238
Updated: 2026-11-03

GitHub AdvisoriesGHSA-68g7-f6pm-w964 No score

Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute...

Record: GHSA-68g7-f6pm-w964
Updated: 2026-11-02

Affected products

0verkill

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	0verkill 0.16 - Game Client Multiple Local Buffer Overflow Vulnerabilities	2004-02-02

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0238 is a high vulnerability (CVSS 7.2) in 0verkill, published March 18, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.16%, the 92nd percentile. No source names a fixed version.