CVE-2004-1511

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window.

Published 2004-12-31. Last modified 2026-06-16.