CVE-2004-1793

Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:yatsoft:switch_off:0.7:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.0:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.1:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.2:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.3:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.4:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.5:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.6:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.7:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.8:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:1.9:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:2.0:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:2.1:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:2.2:*:*:*:*:*:*:*
cpe:2.3:a:yatsoft:switch_off:2.3:*:*:*:*:*:*:*

History

20 Nov 2024, 23:51

Type Values Removed Values Added
References () http://secunia.com/advisories/10521 - Exploit () http://secunia.com/advisories/10521 - Exploit
References () http://securitytracker.com/id?1008581 - Exploit () http://securitytracker.com/id?1008581 - Exploit
References () http://www.elitehaven.net/switchoff.txt - Exploit () http://www.elitehaven.net/switchoff.txt - Exploit
References () http://www.osvdb.org/3309 - () http://www.osvdb.org/3309 -
References () http://www.securityfocus.com/archive/1/348693 - Exploit () http://www.securityfocus.com/archive/1/348693 - Exploit
References () http://www.securityfocus.com/bid/9340 - Exploit () http://www.securityfocus.com/bid/9340 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/14124 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/14124 -

Information

Published : 2004-12-31 05:00

Updated : 2024-11-20 23:51


NVD link : CVE-2004-1793

Mitre link : CVE-2004-1793

CVE.ORG link : CVE-2004-1793


JSON object : View

Products Affected

yatsoft

  • switch_off