Every CVESearch/Get API key

CVE-2004-1916

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows...

7.5 HighFix available

CVE-2004-1916 is a high vulnerability (CVSS 7.5) in lcdproc, published April 8, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.28%, the 91st percentile. Fixed in lcdproc 0.4.5.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
4.28%EPSS, 91st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.4.5lcdproc +2 more

Description

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.

Exploit likelihood

4.28%Down 3.5 points since Feb 4, 2022
90%50%10%1%

Affected packages

Affected packages
PackageAffectedFixed
lcdproc
Debian:12
before 0.4.5
0.4.5
lcdproc
Debian:13
before 0.4.5
0.4.5
lcdproc
Debian:14
before 0.4.5
0.4.5

What each source reports

NVD Score used7.5

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.

Record
CVE-2004-1916
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.

Record
CVE-2004-1916
Updated
2026-11-02
EUVDEUVD-2004-1909No score

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.

Record
EUVD-2004-1909
Updated
2026-11-03
GitHub AdvisoriesGHSA-48p2-f7h3-gpwwNo score

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows...

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.

Record
GHSA-48p2-f7h3-gpww
Updated
2026-11-02
OSVNo score

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.

Record
CVE-2004-1916
Updated
2026-11-02
OSVDEBIAN-CVE-2004-1916No score

Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.

Record
DEBIAN-CVE-2004-1916
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open