CVE-2004-1916
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows...
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
- Record
CVE-2004-1916- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
- Record
CVE-2004-1916- Updated
- 2026-11-02
EUVDEUVD-2004-1909 No score
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
- Record
EUVD-2004-1909- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-48p2-f7h3-gpww No score
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows...
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
- Record
GHSA-48p2-f7h3-gpww- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
- Record
CVE-2004-1916- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1916 No score
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
- Record
DEBIAN-CVE-2004-1916- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1916 is a high vulnerability (CVSS 7.5) in lcdproc, published April 8, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.24%, the 91st percentile. Fixed in lcdproc 0.4.5.
References
lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html
security.gentoo.org/glsa/glsa-200404-19.xml
marc.info?l=bugtraq&m=108146376315229&w=2
securityfocus.com/bid/10085
exchange.xforce.ibmcloud.com/vulnerabilities/15814
secunia.com/advisories/11333
nvd.nist.gov/vuln/detail/CVE-2004-1916
github.com/advisories/GHSA-48p2-f7h3-gpww
security-tracker.debian.org/tracker/CVE-2004-1916