CVE-2004-2552: Tim Mann Xboard

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost command line argument. NOTE: since the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability.

Affected products

• Tim Mann Xboard: version 4.2.1 only; version 4.2.2 only; version 4.2.3 only; version 4.2.4 only; version 4.2.5 only; version 4.2.6 only; …

Published 2004-12-31. Last modified 2026-06-16.