What’s Vulnerable › Vulnerabilities

CVE-2004-0224

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-04-15 · updated 2026-06-16

Description

Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."

Affected products

• Double Precision Incorporated Courier Mta: 0.43, 0.43.1, 0.43.2, 0.44, 0.44.2
• Double Precision Incorporated Sqwebmail: 3.5.2, 3.5.3, 3.6.1, 3.6.2, 3.6_.0
• gentoo Linux: 1.4, 1.4-rc1, 1.4-rc2, 1.4-rc3
• Inter7 Courier-Imap: 1.6, 1.7, 2.0.0, 2.1, 2.1.1, 2.1.2 (+2)

References

• http://secunia.com/advisories/11087/
• http://sourceforge.net/project/shownotes.php?release_id=5767
• http://www.securityfocus.com/bid/9845
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15434
• http://secunia.com/advisories/11087/
• http://sourceforge.net/project/shownotes.php?release_id=5767
• http://www.securityfocus.com/bid/9845
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15434

Get alerted when CVE-2004-0224 or the next vulnerability affects your stack