CVE-2004-1274: Greed

High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days.

The DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a filename with shell metacharacters.

Affected products

  • Greed Greed: version 0.81p only

Published 2005-01-10. Last modified 2026-06-16.