CVE-2004-1333

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-15 · updated 2026-06-16

Description

Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow.

Affected products

Linux kernel: 2.4.0, 2.4.0-test1, 2.4.0-test10, 2.4.0-test11, 2.4.0-test12, 2.4.0-test2 (+90)
RedHat Fedora Core: core_1.0, core_2.0, core_3.0
RedHat Linux: 7.3, 9.0

References

http://secunia.com/advisories/17826
http://secunia.com/advisories/20162
http://secunia.com/advisories/20163
http://secunia.com/advisories/20202
http://secunia.com/advisories/20338
http://www.debian.org/security/2006/dsa-1067
http://www.debian.org/security/2006/dsa-1069
http://www.debian.org/security/2006/dsa-1070
http://www.debian.org/security/2006/dsa-1082
http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

Get alerted when CVE-2004-1333 or the next vulnerability affects your stack