AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2004-1038

HIGH · CVSS 7.2 EPSS 0.48% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-03-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2004-1038
Severity
HIGH
CVSS
7.2
EPSS
0.48%
Windows Linux

Original NVD Description

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.