CVE-2004-0964
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote...
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
- Record
CVE-2004-0964- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
- Record
CVE-2004-0964- Updated
- 2026-11-02
EUVDEUVD-2004-0962 No score
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
- Record
EUVD-2004-0962- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xqq5-jfcp-g927 No score
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote...
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
- Record
GHSA-xqq5-jfcp-g927- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freeampDebian:3.0 |
before 2.1.1.0-4woody2 | 2.1.1.0-4woody2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Zinf Audio Player 2.2.1 - '.pls' Local Stack Buffer Overflow (Metasploit) | 2010-11-24 |
| Exploit-DB | Zinf Audio Player 2.2.1 - '.pls' Local Buffer Overflow (DEP Bypass) | 2011-08-03 |
| Exploit-DB | Zinf Audio Player 2.2.1 - Local Buffer Overflow | 2004-09-28 |
| Exploit-DB | Zinf Audio Player 2.2.1 - '.pls' Stack Overflow (PoC) | 2009-01-27 |
| Exploit-DB | Zinf Audio Player 2.2.1 - '.pls' Universal Local Buffer Overflow | 2009-01-28 |
| Exploit-DB | Zinf Audio Player 2.2.1 - '.pls' Universal Overwrite (SEH) | 2009-03-23 |
| Metasploit | Zinf Audio Player 2.2.1 (PLS File) Stack Buffer Overflow | 2004-09-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0964 is a high vulnerability (CVSS 10.0) in Debian Linux, published October 20, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 62.7%, the 99th percentile. Fixed in freeamp 2.1.1.0-4woody2.
References
marc.info?l=bugtraq&m=109638486728548&w=2
securityfocus.com/bid/11248
secunia.com/advisories/12656
securityreason.com/securityalert/8341
exchange.xforce.ibmcloud.com/vulnerabilities/17491
debian.org/security/2004/dsa-587
nvd.nist.gov/vuln/detail/CVE-2004-0964
github.com/advisories/GHSA-xqq5-jfcp-g927