CVE-2004-1773

Description

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

How to fix CVE-2004-1773

To remediate CVE-2004-1773, upgrade the affected package to a fixed version below.

• Debian/sharutils—upgrade to 1:4.2.1-12 or later

Is CVE-2004-1773 being exploited?

Low — EPSS is 3.0%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1:4.2.1-12

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2004-1773