CVE-2004-1906

CVE-2004-1906 describes a denial-of-service vulnerability, potentially leading to arbitrary code execution, in McAfee FreeScan. This flaw allows remote attackers to trigger a buffer overflow by supplying an excessively long string to the ScanParam property of a COM object. With a CVSS score of 5.0, this vulnerability is network-exploitable with low attack complexity, requiring no authentication, and primarily impacts availability. While not listed in CISA's KEV catalog, a Proof-of-Concept exploit is available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.