CVE-2004-1681: Qnx Photon Microgui

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter.

Affected products

  • Qnx Photon Microgui: any version
  • Qnx Rtp: version 6.1 only

Published 2004-08-26. Last modified 2026-06-16.