CVE-2004-1378: Jabberstudio Jabberd

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.

Affected products

• Jabberstudio Jabberd: version 1.4 only; version 1.4.1 only; version 1.4.2 only; version 1.4.2a only; version 1.4.3 only
• Jabberstudio JADC2S: version 0.6 only; version 0.7 only; version 0.8 only; version 0.9 only

Published 2004-09-21. Last modified 2026-06-16.