CVE-2004-1304: Buffer Overflow
Published Dec 22, 2004
·Updated
Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.
Affected Software
16 affected components
file file=4.7
file file=4.5
file file=4.4
file file=4.1
file file=4.10
file file=4.2
file file=4.9
file file=4.6
file file=4.3
file file=4.8
file file=4.0
file file=4.11
Trustix Secure Linux=2.0
Trustix Secure Linux=2.1
Trustix Secure Linux=2.2
Gentoo Linux
Remediation
Patch Available
Event History
Dec 22, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1304?
CVE-2004-1304 is classified as a high-severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2004-1304?
To fix CVE-2004-1304, update to a patched version of the 'file' utility that is newer than 4.12.
3
What systems are affected by CVE-2004-1304?
CVE-2004-1304 affects multiple versions of the 'file' utility including versions 4.0 through 4.11.
4
What type of vulnerability is CVE-2004-1304?
CVE-2004-1304 is a stack-based buffer overflow vulnerability that occurs in the ELF header parsing code.
5
Can CVE-2004-1304 be exploited remotely?
Yes, CVE-2004-1304 can be exploited remotely by delivering a crafted ELF file to the vulnerable system.