CVE-2004-1282: Linpopup

High severity, CVSS 10.0. EPSS: 9.1% chance of exploitation in the next 30 days.

Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary code via a crafted message that is not properly handled during a Reply operation.

Affected products

• Linpopup Linpopup: version 1.2 only

Published 2005-01-10. Last modified 2026-06-16.