CVE-2004-2129: SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow

Description

SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow.

Exploitation

Is it being used?

Exploit prediction (EPSS)3.4% · higher than 89% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

SP

Surfnow Professional · Loom Software

1.2; 1.4; 1.5; 1.6; 2.0; 2.1; +1 more · source: NVD

SS

Surfnow Standard · Loom Software

1.2; 1.4; 1.5; 1.6; 2.0; 2.1; +1 more · source: NVD