{"id":"CVE-2004-1118","aliases":["EUVD-2004-1116","GHSA-9c6j-wv9c-hggx"],"status":"published","title":"Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by...","description":"Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.08184,"percentile":0.94906,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-12-01T05:00:00Z","modified":"2026-06-16T22:07:03Z","exploits":[{"source":"exploitdb","id":"EDB-649","title":"wodFtpDLX Client - ActiveX Control Buffer Overflow Crash","type":"dos","platform":"windows","date":"2004-11-22","verified":true,"url":"https://www.exploit-db.com/exploits/649"},{"source":"exploitdb","id":"EDB-650","title":"CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow","type":"remote","platform":"windows","date":"2004-11-22","verified":true,"url":"https://www.exploit-db.com/exploits/650"}],"products":[{"vendor":"weonlydo","product":"wodftpdlx_activex_component"}],"references":[{"url":"http://www.securityfocus.com/bid/11721","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=110114233323417\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18190","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1118"},{"url":"https://github.com/advisories/GHSA-9c6j-wv9c-hggx"}],"sources":{"cve":[{"id":"CVE-2004-1118","description":"Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.","status":"published","published":"2004-12-01T05:00:00Z","modified":"2024-08-08T00:39:00.818Z","updated_at":"2026-11-02T14:34:54.063504Z"}],"euvd":[{"id":"EUVD-2004-1116","description":"Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.","status":"published","published":"2004-12-01T05:00:00Z","modified":"2024-08-08T00:39:00Z","updated_at":"2026-11-03T01:15:16.148157Z"}],"ghsa":[{"id":"GHSA-9c6j-wv9c-hggx","title":"Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by...","description":"Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.","status":"published","published":"2022-04-29T02:58:59Z","modified":"2023-01-30T05:03:18Z","updated_at":"2026-11-02T14:46:48.522337Z"}],"nvd":[{"id":"CVE-2004-1118","description":"Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.","status":"published","published":"2005-01-10T05:00:00Z","modified":"2026-06-16T22:07:03.43Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.133049Z"}]}}