Back
CVE-2004-2160
Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code.
Published: Dec 31, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| xmlstarlet | command_line_xml_toolkit | 0.9.3 |
GitHub Security Advisory GHSA-2g2m-8qqm-fqp4
Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow...
References (4)
- http://cvs.sourceforge.net/viewcvs.py/xmlstar/xmlstarlet/src/xml_elem.c?r1=1.17&r2=1.18
- http://sourceforge.net/project/shownotes.php?release_id=268962 Patch
- http://cvs.sourceforge.net/viewcvs.py/xmlstar/xmlstarlet/src/xml_elem.c?r1=1.17&r2=1.18
- http://sourceforge.net/project/shownotes.php?release_id=268962 Patch
Risk Scores
CVSS Score
6.4 / 10
EPSS Score
1.70%
Top 25% most likely to be exploited
Threat Score
26.1 / 100
Data Sources
NVD
EPSS
GitHub