CVE-2004-1333

Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow.

• http://secunia.com/advisories/17826
• http://secunia.com/advisories/20162
• http://secunia.com/advisories/20163
• http://secunia.com/advisories/20202
• http://secunia.com/advisories/20338
• http://www.debian.org/security/2006/dsa-1067
• http://www.debian.org/security/2006/dsa-1069
• http://www.debian.org/security/2006/dsa-1070
• http://www.debian.org/security/2006/dsa-1082
• http://www.guninski.com/where_do_you_want_billg_to_go_today_2.htmlPatch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
• http://www.novell.com/linux/security/advisories/2005_18_kernel.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/11956Exploit, Patch, Vendor Advisory
• http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.htmlURL Repurposed
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18523
• https://usn.ubuntu.com/47-1/
• http://secunia.com/advisories/17826
• http://secunia.com/advisories/20162
• http://secunia.com/advisories/20163
• http://secunia.com/advisories/20202
• http://secunia.com/advisories/20338
• http://www.debian.org/security/2006/dsa-1067
• http://www.debian.org/security/2006/dsa-1069
• http://www.debian.org/security/2006/dsa-1070
• http://www.debian.org/security/2006/dsa-1082
• http://www.guninski.com/where_do_you_want_billg_to_go_today_2.htmlPatch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
• http://www.novell.com/linux/security/advisories/2005_18_kernel.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/11956Exploit, Patch, Vendor Advisory
• http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.htmlURL Repurposed
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18523
• https://usn.ubuntu.com/47-1/

Published

Dec 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1327Buffer overflow in Crystal FTP Client 2.8 allows remote mali…
• CVE-2004-1328Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, a…
• CVE-2004-1329Untrusted execution path vulnerability in the diag commands …
• CVE-2004-1330Buffer overflow in paginit in AIX 5.1 through 5.3 allows loc…
• CVE-2004-1331The execCommand method in Microsoft Internet Explorer 6.0 SP…
• CVE-2004-1332Stack-based buffer overflow in the FTP daemon in HP-UX 11.11…
• CVE-2004-1334Integer overflow in the ip_options_get function in the Linux…
• CVE-2004-1335Memory leak in the ip_options_get function in the Linux kern…
• CVE-2004-1336The xdvizilla script in tetex-bin 2.0.2 creates temporary fi…
• CVE-2004-1337The POSIX Capability Linux Security Module (LSM) for Linux k…
• CVE-2004-1338The triggers in Oracle 9i and 10g allow local users to gain …
• CVE-2004-1339SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_I…