« Volver al listado

CVE-2004-2629

Estado: ModificadaAlta (7.8)—

Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express (when used with H.323 conferencing endpoints), Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

First Virtual Communications — Click TO Meet ExpressFirst Virtual Communications — Click TO Meet PremierFirst Virtual Communications — Conference ServerFirst Virtual Communications — V-gate

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-2629",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/11192",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.fvc.com/eng/docs/misc_docs/H.323_Security_Bulletin.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cert.org/advisories/CA-2004-01.html",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.uniras.gov.uk/vuls/2004/006489/h323.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/11192",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.fvc.com/eng/docs/misc_docs/H.323_Security_Bulletin.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cert.org/advisories/CA-2004-01.html",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.uniras.gov.uk/vuls/2004/006489/h323.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express (when used with H.323 conferencing endpoints), Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."
    }
  ],
  "lastModified": "2026-06-16T22:10:00.847",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:first_virtual_communications:click_to_meet_express:h.323:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "111AC189-C71C-4BE9-A793-EF3162818022"
            },
            {
              "criteria": "cpe:2.3:a:first_virtual_communications:click_to_meet_premier:h.323:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2DAA0BB-FA0E-41D1-9885-B8C212017F6A"
            },
            {
              "criteria": "cpe:2.3:a:first_virtual_communications:conference_server:h.323:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E861CDB-26C8-4133-94DF-463840FAB598"
            },
            {
              "criteria": "cpe:2.3:a:first_virtual_communications:v-gate:h.323:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B97C3E4-E126-45B8-8E1D-B7FDC5608E2E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}