What’s Vulnerable › Vulnerabilities

CVE-2004-0834

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-12-23 · updated 2026-06-16

Description

Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.

Affected products

• gentoo Linux: 1.4
• Mandrakesoft Mandrake Linux: 8.2, 9.0, 9.1, 9.2, 10.0, 10.1
• Mandrakesoft Mandrake Linux Corporate Server: 2.1
• Mandrakesoft Mandrake Multi Network Firewall: 8.2
• Speedtouch Usb Driver: 1.0, 1.1, 1.2, 1.2_beta1, 1.2_beta2, 1.2_beta3 (+1)

References

• http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734
• http://speedtouch.sourceforge.net/index.php?/news.en.html
• http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17792
• http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734
• http://speedtouch.sourceforge.net/index.php?/news.en.html
• http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17792

Get alerted when CVE-2004-0834 or the next vulnerability affects your stack