VYPR
Unrated severityNVD Advisory· Published Apr 27, 2005· Updated Apr 16, 2026

CVE-2004-1488

CVE-2004-1488

Description

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.

Affected products

5
  • GNU/Wget5 versions
    cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:wget:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:wget:1.9:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:wget:1.9.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

10

News mentions

0

No linked articles in our index yet.