What’s Vulnerable › Vulnerabilities

CVE-2004-0109

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-06-01 · updated 2026-06-16

Description

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Affected products

• Linux kernel: 2.4.0, 2.5.0, 2.6.0

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
• http://marc.info/?l=bugtraq&m=108213675028441&w=2
• http://rhn.redhat.com/errata/RHSA-2004-166.html
• http://secunia.com/advisories/11361
• http://secunia.com/advisories/11362
• http://secunia.com/advisories/11373
• http://secunia.com/advisories/11429
• http://secunia.com/advisories/11464
• http://secunia.com/advisories/11469
• http://secunia.com/advisories/11470

Get alerted when CVE-2004-0109 or the next vulnerability affects your stack