← Vulnerability feed

Vulnerability record · CVE-2004-1892 · published 31 December 2004

CVE-2004-1892: Emule vulnerability

Emule · Emule

Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string.

7.5 CVSS 2.0 High EPSS 10% · top 4.5%
7.5CVSS 2.0 base score
10%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=108100987429960&w=2
http://secunia.com/advisories/11289 Patch
http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22 PatchVendor Advisory
http://www.securityfocus.com/bid/10039 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15730
http://marc.info/?l=bugtraq&m=108100987429960&w=2
http://secunia.com/advisories/11289 Patch
http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22 PatchVendor Advisory
http://www.securityfocus.com/bid/10039 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15730

Track CVE-2004-1892 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2003-1514Emule memory buffer overflow vulnerabilityeMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow.EPSS 1.9%

Source: NIST National Vulnerability Database (record CVE-2004-1892), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.