CVE-2004-0262: The Palace Client

High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.

Affected products

• The Palace The Palace Client: version 3.5 only

Published 2004-11-23. Last modified 2026-06-16.