PT-2004-1012 · Mah-Jong · Mah-Jong

Published 2004-08-19 · Updated 2025-01-16 · CVE-2004-0458

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions mah-jong versions prior to 1.6.2

Description The issue allows remote attackers to cause a denial of service, resulting in a server crash. This is achieved via a missing argument, which triggers a null pointer dereference. Multiple vulnerabilities in the mah-jong package may lead to disruption of protected information availability, and exploitation can be done remotely.

Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the mah-jong service to minimize the risk of exploitation.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2015-02411

CVE-2004-0458

DSA-503

Affected Products

Mah-Jong

References · 12

• https://security-tracker.debian.org/tracker/CVE-2004-0458 · Vendor Advisory
• http://securityfocus.com/bid/10343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0458 · Security Note
• http://debian.org/security/2004/dsa-503 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0458 · Security Note
• https://osv.dev/vulnerability/CVE-2004-0458 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02411 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0458 · Vendor Advisory
• http://debian.org/security/dsa-503 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16143 · Note
• https://t.me/cvenotify/66712 · Telegram Post
• https://t.me/cvenotify/107657 · Telegram Post