CVE-2004-2609

LOW · CVSS 2.1 EPSS 0.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2004-2609

Severity

LOW

CVSS

2.1

EPSS

0.38%

Windows

Original Filing — NVD Description

The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information (an unencrypted password for a Windows domain account) via four "stuffit /f:stuffit.dat" invocations, possibly due to a buffer overflow.