CVE-2004-1257

CVE-2004-1257 describes a critical buffer overflow vulnerability in the process_abc function of abc2mtex version 1.6.1. This flaw allows remote attackers to execute arbitrary code on affected systems by supplying specially crafted ABC files. The vulnerability carries a CVSS score of 10.0, indicating maximum severity. Its attack vector is network-based with low attack complexity and no authentication required, leading to complete compromise of confidentiality, integrity, and availability. Despite its age and high severity, there is no evidence of active exploitation (KEV list) or publicly available exploit code in Metasploit, Nuclei, or ExploitDB. However, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting continued awareness or interest.