CVE-2004-2714: windowmaker
CVSS: 6.0v2.0MediumModified
AliasesDEBIAN-CVE-2004-2714
Published 06-10-2007Last modified 08-08-2024
Vulnerability summary
CVE-2004-2714 is a medium (CVSS 6.0) vulnerability in windowmaker. EPSS estimates a 0.96% chance of exploitation in the next 30 days, higher than 61% of scored vulnerabilities.
CVSS score
6.0/10
010
Medium · v2.0 (NVD)EPSS score
0.96%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 06-10-2007PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.0Preferred score · NVD (NIST)
AV:N/AC:M/Au:S/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
0.96%
Chance of exploitation in the next 30 days
Percentile
61%
Versus all other CVEs
30-day change
0.00 pp
From 0.96% on 19-09-2026
19-09-202619-10-2026
EPSS score0.96%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- wmaker< 0.90-1
Windowmaker1 product
- windowmaker0.20.1.3 | 0.52.2 | 0.53 | 0.60 | 0.60.0 | 0.61 | 0.61.1 | 0.62 | 0.62.1 | 0.63 | 0.63.1 | 0.64 | 0.65 | 0.65.1 | 0.80 | 0.80.2
2 vendors · 2 products
References
7 links- www.windowmaker.org/src/ChangeLogX Refsource CONFIRM