CVE-2004-2433
Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 4.23% probability · 90th percentile
- CISA KEV
- Not listed
- Affected
- altnet/altnet download manager · grokster/grokster · kazaa/kazaa media desktop
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/12446Patch, Vendor Advisory
- http://secunia.com/advisories/12456Vendor Advisory
- http://securitytracker.com/id?1011155
- http://www.osvdb.org/9549
- http://www.securityfocus.com/bid/11101Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17221
- http://secunia.com/advisories/12446Patch, Vendor Advisory
- http://secunia.com/advisories/12456Vendor Advisory
- http://securitytracker.com/id?1011155
- http://www.osvdb.org/9549
- http://www.securityfocus.com/bid/11101Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17221
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.