CVE-2004-1773: GNU Sharutils

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.

Affected products

• GNU Sharutils: version 4.2 only; version 4.2.1 only

Published 2004-12-31. Last modified 2026-06-16.