CVE-2004-2643

low

Microsoft

CVSS v3 Base Score

3.7

AV:L/AC:H/Au:N/C:P/I:P/A:P

EPSS Score

0.5%

Exploitation probability in 30 days

Top 35% most likely to be exploited

Attack Characteristics

Attack Vector

Local

Attack Complexity

High

Confidentiality

Integrity

Availability

Published: December 31, 2004 (7804 days ago)

Last Modified: April 16, 2026

Source: NVD

Description

Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive.

NVD-CWE-Other

microsoft cabarc