CVE-2004-1303: Yanf

High severity, CVSS 10.0. EPSS: 6.2% chance of exploitation in the next 30 days.

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.

Affected products

• Yanf Yanf: version 0.4 only

Published 2005-01-10. Last modified 2026-06-16.