Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2004

84 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-1208
    44Plan

    Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session par

    CriticalCVSS 10.0No exploitEPSS 13%

    oracle · oracle9iDec 3, 2004

  • CVE-2004-0393
    45Plan

    Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format s

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    rlpr · rlprDec 6, 2004

  • CVE-2004-0608
    62This week

    The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2

    CriticalCVSS 10.0WeaponizedEPSS 73%

    nerf arena blast · nerf arena blastDec 6, 2004

  • CVE-2004-0610
    24Monitor

    The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusa

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · mn-500 wireless base stationDec 6, 2004

  • CVE-2004-0627
    61This week

    The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scr

    CriticalCVSS 10.0Proof of conceptEPSS 69%

    mysql · mysqlDec 6, 2004

  • CVE-2004-0633
    25Monitor

    The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer ov

    MediumCVSS 5.0Proof of conceptEPSS 17%

    ethereal group · etherealDec 6, 2004

  • CVE-2004-1319
    28Monitor

    The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windo

    MediumCVSS 5.0No exploitEPSS 26%

    nortel · ip softphone 2050Dec 15, 2004

  • CVE-2004-1324
    15Monitor

    The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone

    LowCVSS 2.6Proof of conceptEPSS 16%

    microsoft · windows media playerDec 18, 2004

  • CVE-2004-1325
    25Monitor

    The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the

    MediumCVSS 5.0Proof of conceptEPSS 15%

    microsoft · windows media playerDec 18, 2004

  • CVE-2005-0066
    23Monitor

    The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router i

    MediumCVSS 5.0No exploitEPSS 10%

    tcp · tcpDec 22, 2004

  • CVE-2005-0067
    24Monitor

    The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for att

    MediumCVSS 5.0No exploitEPSS 13%

    tcp · tcpDec 22, 2004

  • CVE-2005-0068
    36Monitor

    The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to f

    MediumCVSS 5.0No exploitEPSS 54%

    tcp · tcpDec 22, 2004

  • CVE-2004-0816
    33Monitor

    Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (app

    HighCVSS 7.5Proof of conceptEPSS 11%

    linux · linux kernelDec 23, 2004

  • CVE-2004-0841
    35Monitor

    Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use dra

    MediumCVSS 5.0Proof of conceptEPSS 48%

    avaya · ip600 media serversDec 23, 2004

  • CVE-2004-0842
    47Plan

    Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash

    HighCVSS 7.5Proof of conceptEPSS 56%

    avaya · ip600 media serversDec 23, 2004

  • CVE-2004-0867
    35Monitor

    Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c

    HighCVSS 7.5No exploitEPSS 17%

    mozilla · firefoxDec 23, 2004

  • CVE-2004-1305
    38Monitor

    The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote

    MediumCVSS 5.0Proof of conceptEPSS 58%

    nortel · ip softphone 2050Dec 23, 2004

  • CVE-2004-1361
    26Monitor

    Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers

    MediumCVSS 5.0No exploitEPSS 20%

    microsoft · windows 2000Dec 23, 2004

  • CVE-2004-1373
    51Plan

    Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrar

    HighCVSS 7.5WeaponizedEPSS 70%

    nullsoft · shoutcast serverDec 23, 2004

  • CVE-2004-1317
    48Plan

    Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbit

    HighCVSS 7.5WeaponizedEPSS 60%

    netcat · netcatDec 27, 2004

  • CVE-2004-0465
    24Monitor

    Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to rea

    MediumCVSS 5.0Proof of conceptEPSS 12%

    openconnect · webconnectDec 31, 2004

  • CVE-2004-0567
    51Plan

    The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and

    HighCVSS 7.5Proof of conceptEPSS 68%

    microsoft · windows 2000Dec 31, 2004

  • CVE-2004-0826
    37Monitor

    Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modif

    HighCVSS 7.5No exploitEPSS 22%

    netscape · certificate serverDec 31, 2004

  • CVE-2004-0985
    46Plan

    Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable

    CriticalCVSS 10.0No exploitEPSS 20%

    microsoft · ieDec 31, 2004

  • CVE-2004-1043
    33Monitor

    Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help

    MediumCVSS 5.0Proof of conceptEPSS 44%

    microsoft · internet explorerDec 31, 2004

  • CVE-2004-1049
    29Monitor

    Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp,

    MediumCVSS 5.1No exploitEPSS 30%

    microsoft · windows 2000Dec 31, 2004

  • CVE-2004-1050
    60This week

    Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes

    CriticalCVSS 10.0Proof of conceptEPSS 67%

    avaya · ip600 media serversDec 31, 2004

  • CVE-2004-1104
    41Plan

    Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a

    HighCVSS 7.5Proof of conceptEPSS 35%

    microsoft · ieDec 31, 2004

  • CVE-2004-1155
    34Monitor

    Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another wind

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · ieDec 31, 2004

  • CVE-2004-1166
    42Plan

    CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP comma

    HighCVSS 7.5Proof of conceptEPSS 39%

    microsoft · ieDec 31, 2004

  • CVE-2004-1173
    34Monitor

    Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTM

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · internet explorerDec 31, 2004

  • CVE-2004-1306
    26Monitor

    Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote a

    MediumCVSS 5.1Proof of conceptEPSS 19%

    microsoft · windows 2000Dec 31, 2004

  • CVE-2004-1388
    50Plan

    Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attack

    HighCVSS 7.5WeaponizedEPSS 68%

    berlios · gps daemonDec 31, 2004

  • CVE-2004-1389
    40Plan

    Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCente

    MediumCVSS 6.0WeaponizedEPSS 9%

    veritas · netbackupDec 31, 2004

  • CVE-2004-1392
    23Monitor

    PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to

    MediumCVSS 5.0Proof of conceptEPSS 10%

    php · phpDec 31, 2004

  • CVE-2004-1423
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virt

    HighCVSS 7.5Proof of conceptEPSS 15%

    php-calendar · php-calendarDec 31, 2004

  • CVE-2004-1437
    34Monitor

    Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitr

    HighCVSS 7.5Proof of conceptEPSS 13%

    pavuk · pavukDec 31, 2004

  • CVE-2004-1439
    35Monitor

    Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1) USER, (2) PASS, (3)

    HighCVSS 7.5Proof of conceptEPSS 15%

    sapporoworks · black jumbodogDec 31, 2004

  • CVE-2004-1456
    34Monitor

    filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

    HighCVSS 7.5Proof of conceptEPSS 13%

    cvstrac · cvstracDec 31, 2004

  • CVE-2004-1464
    60This week

    Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a craf

    MediumCVSS 5.9KEVWeaponizedEPSS 4%

    cisco · iosDec 31, 2004

  • CVE-2004-1491
    24Monitor

    Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a short

    MediumCVSS 5.0Proof of conceptEPSS 12%

    opera · opera browserDec 31, 2004

  • CVE-2004-1520
    45Plan

    Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE comman

    MediumCVSS 4.6WeaponizedEPSS 88%

    ipswitch · imailDec 31, 2004

  • CVE-2004-1546
    29Monitor

    Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOML

    MediumCVSS 5.0Proof of conceptEPSS 31%

    alt-n · mdaemonDec 31, 2004

  • CVE-2004-1550
    40Plan

    Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obta

    HighCVSS 7.5WeaponizedEPSS 18%

    motorola · wr850gDec 31, 2004

  • CVE-2004-1558
    51Plan

    Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash)

    HighCVSS 7.5WeaponizedEPSS 71%

    ypops · ypopsDec 31, 2004

  • CVE-2004-1560
    28Monitor

    Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433

    MediumCVSS 5.0Proof of conceptEPSS 25%

    microsoft · sql serverDec 31, 2004

  • CVE-2004-1561
    53Plan

    Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of he

    HighCVSS 7.5WeaponizedEPSS 77%

    icecast · icecastDec 31, 2004

  • CVE-2004-1584
    23Monitor

    CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify e

    MediumCVSS 5.0Proof of conceptEPSS 11%

    wordpress · wordpressDec 31, 2004

  • CVE-2004-1782
    39Monitor

    athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass paramete

    HighCVSS 7.5Proof of conceptEPSS 28%

    david maciejak · athena web registrationDec 31, 2004

  • CVE-2004-1789
    20Monitor

    Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web s

    MediumCVSS 4.3Proof of conceptEPSS 11%

    zyxel · zywall10Dec 31, 2004

  • CVE-2004-1812
    54Plan

    Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attacker

    CriticalCVSS 10.0No exploitEPSS 45%

    broadcom · unicenter tngDec 31, 2004

  • CVE-2004-1892
    33Monitor

    Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attacke

    HighCVSS 7.5Proof of conceptEPSS 10%

    emule · emuleDec 31, 2004

  • CVE-2004-1898
    45Plan

    Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    tildeslash · monitDec 31, 2004

  • CVE-2004-2074
    40Plan

    Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1

    MediumCVSS 5.0WeaponizedEPSS 35%

    bolintech · dream ftp serverDec 31, 2004

  • CVE-2004-2104
    24Monitor

    Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP a

    MediumCVSS 5.0Proof of conceptEPSS 11%

    novell · netwareDec 31, 2004

  • CVE-2004-2111
    60This week

    Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via

    HighCVSS 8.5WeaponizedEPSS 86%

    solarwinds · serv-u file serverDec 31, 2004

  • CVE-2004-2115
    45Plan

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitra

    MediumCVSS 6.8Proof of conceptEPSS 58%

    oracle · http serverDec 31, 2004

  • CVE-2004-2137
    28Monitor

    Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients o

    MediumCVSS 5.0No exploitEPSS 26%

    microsoft · outlook expressDec 31, 2004

  • CVE-2004-2167
    34Monitor

    Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the exp

    HighCVSS 7.5Proof of conceptEPSS 14%

    latex2rtf · latex2rtfDec 31, 2004

  • CVE-2004-2179
    24Monitor

    asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · frontpageDec 31, 2004

  • CVE-2004-2221
    40Plan

    Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTT

    HighCVSS 7.5WeaponizedEPSS 34%

    mercantec · softcartDec 31, 2004

  • CVE-2004-2262
    34Monitor

    ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary co

    HighCVSS 7.5Proof of conceptEPSS 14%

    e107 · e107Dec 31, 2004

  • CVE-2004-2271
    52Plan

    Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

    HighCVSS 7.5WeaponizedEPSS 71%

    minishare · minimal http serverDec 31, 2004

  • CVE-2004-2275
    44Plan

    i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter.

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    i-mall commerce · i-mall.cgiDec 31, 2004

  • CVE-2004-2289
    47Plan

    Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellCl

    CriticalCVSS 10.0Proof of conceptEPSS 23%

    microsoft · windows xpDec 31, 2004

  • CVE-2004-2291
    33Monitor

    Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Hel

    HighCVSS 7.5Proof of conceptEPSS 10%

    microsoft · ieDec 31, 2004

  • CVE-2004-2292
    24Monitor

    Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to

    MediumCVSS 5.0No exploitEPSS 12%

    alt-n · mdaemonDec 31, 2004

  • CVE-2004-2299
    33Monitor

    Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long

    HighCVSS 7.5Proof of conceptEPSS 10%

    omnicron · omnihttpdDec 31, 2004

  • CVE-2004-2307
    24Monitor

    Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI wit

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · internet explorerDec 31, 2004

  • CVE-2004-2364
    23Monitor

    Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs tha

    MediumCVSS 5.0Proof of conceptEPSS 10%

    phpx · phpxDec 31, 2004

  • CVE-2004-2383
    26Monitor

    Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events

    MediumCVSS 5.1Proof of conceptEPSS 19%

    microsoft · ieDec 31, 2004

  • CVE-2004-2416
    48Plan

    Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.

    HighCVSS 7.5WeaponizedEPSS 60%

    youngzsoft · ccproxyDec 31, 2004

  • CVE-2004-2425
    34Monitor

    Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`

    HighCVSS 7.5Proof of conceptEPSS 13%

    axis · 2100 network cameraDec 31, 2004

  • CVE-2004-2434
    30Monitor

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon

    MediumCVSS 5.0Proof of conceptEPSS 32%

    microsoft · ieDec 31, 2004

  • CVE-2004-2442
    23Monitor

    Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earl

    MediumCVSS 5.0Proof of conceptEPSS 10%

    f-secure · f-secure anti-virusDec 31, 2004

  • CVE-2004-2466
    42Plan

    chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly

    MediumCVSS 5.0WeaponizedEPSS 74%

    efs software · easy chat serverDec 31, 2004

  • CVE-2004-2482
    24Monitor

    Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does no

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · outlookDec 31, 2004

  • CVE-2004-2501
    34Monitor

    Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute a

    HighCVSS 7.5Proof of conceptEPSS 14%

    mailenable · mailenable enterpriseDec 31, 2004

  • CVE-2004-2532
    45Plan

    Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    solarwinds · serv-u file serverDec 31, 2004

  • CVE-2004-2549
    23Monitor

    Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a

    MediumCVSS 5.0Proof of conceptEPSS 10%

    nortel · wlan access point 2220Dec 31, 2004

  • CVE-2004-2652
    34Monitor

    The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remo

    HighCVSS 7.8Proof of conceptEPSS 11%

    sourcefire · snortDec 31, 2004

  • CVE-2004-2685
    33Monitor

    Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) com

    HighCVSS 7.5Proof of conceptEPSS 10%

    youngzsoft · ccproxyDec 31, 2004

  • CVE-2004-2687
    63This week

    distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute a

    CriticalCVSS 9.3WeaponizedEPSS 88%

    apple · xcodeDec 31, 2004

  • CVE-2004-2691
    40Plan

    Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of

    HighCVSS 7.1WeaponizedEPSS 39%

    3com · 3c17205-usDec 31, 2004