CVE-2004-0362

CVE-2004-0362 describes multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, affecting various RealSecure, Proventia, and BlackICE products. This vulnerability allows remote attackers to execute arbitrary code by sending crafted SRV_MULTI responses containing overly long nickname, firstname, lastname, or email address fields. With a CVSS score of 7.5, this is a high-severity vulnerability that can be exploited remotely with low attack complexity, leading to potential compromise of confidentiality, integrity, and availability. The vulnerability was actively exploited by the Witty worm, and exploit modules are publicly available in Metasploit and ExploitDB, though there is minimal community discussion or media coverage.