CVE-2004-0309

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-11-23 · updated 2026-06-16

Description

Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.

Affected products

Zonelabs Integrity: 4.0
Zonelabs Zonealarm: 4.0, 4.5

References

http://download.zonelabs.com/bin/free/securityAlert/8.html
http://marc.info/?l=bugtraq&m=107722656827427&w=2
http://www.ciac.org/ciac/bulletins/o-084.shtml
http://www.kb.cert.org/vuls/id/619982
http://www.osvdb.org/3991
http://www.securityfocus.com/bid/9696
https://exchange.xforce.ibmcloud.com/vulnerabilities/14991
http://download.zonelabs.com/bin/free/securityAlert/8.html
http://marc.info/?l=bugtraq&m=107722656827427&w=2
http://www.ciac.org/ciac/bulletins/o-084.shtml
http://www.kb.cert.org/vuls/id/619982
http://www.osvdb.org/3991

Get alerted when CVE-2004-0309 or the next vulnerability affects your stack