Vulnerability Details CVE-2004-1793
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.097
EPSS Ranking 92.5%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/10521
- http://securitytracker.com/id?1008581
- http://www.elitehaven.net/switchoff.txt
- http://www.osvdb.org/3309
- http://www.securityfocus.com/archive/1/348693
- http://www.securityfocus.com/bid/9340
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14124
- http://secunia.com/advisories/10521
- http://securitytracker.com/id?1008581
- http://www.elitehaven.net/switchoff.txt
- http://www.osvdb.org/3309
- http://www.securityfocus.com/archive/1/348693
- http://www.securityfocus.com/bid/9340
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14124
Products affected by CVE-2004-1793
-
cpe:2.3:a:yatsoft:switch_off:0.7
-
cpe:2.3:a:yatsoft:switch_off:1.0
-
cpe:2.3:a:yatsoft:switch_off:1.1
-
cpe:2.3:a:yatsoft:switch_off:1.2
-
cpe:2.3:a:yatsoft:switch_off:1.3
-
cpe:2.3:a:yatsoft:switch_off:1.4
-
cpe:2.3:a:yatsoft:switch_off:1.5
-
cpe:2.3:a:yatsoft:switch_off:1.5.1
-
cpe:2.3:a:yatsoft:switch_off:1.6
-
cpe:2.3:a:yatsoft:switch_off:1.7
-
cpe:2.3:a:yatsoft:switch_off:1.8
-
cpe:2.3:a:yatsoft:switch_off:1.9
-
cpe:2.3:a:yatsoft:switch_off:2.0
-
cpe:2.3:a:yatsoft:switch_off:2.1
-
cpe:2.3:a:yatsoft:switch_off:2.2
-
cpe:2.3:a:yatsoft:switch_off:2.3