CVE-2004-2167

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 14%

from disclosure to weapon0 days

Published on NVDJul 10

1st PoCSep 21

exploitation probability

14%top 4% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/24622 githubgithub.com/uzzzval/cve-2004-2167★ 0

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log https://exchange.xforce.ibmcloud.com/vulnerabilities/17460 https://exchange.xforce.ibmcloud.com/vulnerabilities/17487 http://www.osvdb.org/displayvuln.php?osvdb_id=10216 http://www.securityfocus.com/bid/11233 http://www.securitytracker.com/alerts/2004/Sep/1011367.html