Vulnerability Details CVE-2004-0733
Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are directly provided to the OutputDebugString function call.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.193
EPSS Ranking 95.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0711.html
- http://marc.info/?l=bugtraq&m=109007978822810&w=2
- http://www.securityfocus.com/bid/10742
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16711
- https://www.exploit-db.com/exploits/3757
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0711.html
- http://marc.info/?l=bugtraq&m=109007978822810&w=2
- http://www.securityfocus.com/bid/10742
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16711
- https://www.exploit-db.com/exploits/3757
Products affected by CVE-2004-0733
-
cpe:2.3:a:ollydbg:ollydbg:1.0.6
-
cpe:2.3:a:ollydbg:ollydbg:1.0.8b
-
cpe:2.3:a:ollydbg:ollydbg:1.0.9
-
cpe:2.3:a:ollydbg:ollydbg:1.10