The DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a filename with shell metacharacters.
References
Link | Resource |
---|---|
http://tigger.uic.edu/~jlongs2/holes/greed.txt | Exploit Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/18634 | |
http://tigger.uic.edu/~jlongs2/holes/greed.txt | Exploit Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/18634 |
Configurations
History
20 Nov 2024, 23:50
Type | Values Removed | Values Added |
---|---|---|
References | () http://tigger.uic.edu/~jlongs2/holes/greed.txt - Exploit, Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/18634 - |
Information
Published : 2005-01-10 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2004-1274
Mitre link : CVE-2004-1274
CVE.ORG link : CVE-2004-1274
JSON object : View
Products Affected
greed
- greed
CWE