Unscored severity · published Dec 31, 2004
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact
–
CVSS
0.4%
EPSS
No
On KEV
Description
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UU
Uudeview · Uudeview
0.5.18; 0.5.19 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2265
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2265
Patch
http://www.securityfocus.com/bid/9857
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15492
More from Uudeview
–
CVE-2008-2266
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary…
–
CVE-2004-0333
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME…