PT-2004-2190 · Abctab2Ps · Abctab2Ps

Published 2004-12-22 · Updated 2017-07-11 · CVE-2004-1260

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: abctab2ps version 1.6.3

Description: The issue is related to multiple buffer overflows in the write heading function in subs.cpp and the trim title function in parse.cpp. These buffer overflows can be triggered by remote attackers using crafted ABC files, potentially allowing them to execute arbitrary code.

Recommendations: For abctab2ps version 1.6.3, consider disabling the write heading and trim title functions until a patch is available to prevent potential exploitation. Restrict access to parsing crafted ABC files to minimize the risk of arbitrary code execution.

Exploit

Fix

Related Identifiers

CVE-2004-1260

Affected Products

Abctab2Ps

References · 6

• 🔥 https://exploit-db.com/exploits/25027 · Exploit
• 🔥 http://tigger.uic.edu/~jlongs2/holes/abctab2ps.txt · Exploit
• 🔥 https://exploit-db.com/exploits/25029 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1260 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18584 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18583 · Note