Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of h…

1. 2004-09-28 First public exploit (Metasploit exploit/windows/http/icecast_header)
2. 2004-12-31 Published

77.93% chance of exploitation in the next 30 days, higher than 99.5% of all scored CVEs (FIRST EPSS, 2026-11-08).

• Metasploit exploit/windows/http/icecast_header Icecast Header Overwrite metasploit exploit, great rank, 2004-09-28
• EDB-16763 Icecast 2.0.1 (Windows x86) - Header Overwrite (Metasploit) remote, 2010-04-30
• EDB-573 Icecast 2.0.1 (Win32) - Remote Code Execution (2) remote, 2004-10-12
• EDB-568 Icecast 2.0.1 (Win32) - Remote Code Execution (1) remote, 2004-10-06
• securityfocus.com http://www.securityfocus.com/bid/11271 referenced PoC, tagged "exploit" by a source, unverified
• aluigi.altervista.org http://aluigi.altervista.org/adv/iceexec-adv.txt referenced PoC, tagged "exploit" by a source, unverified
• securiteam.com http://www.securiteam.com/exploits/6X00315BFM.html referenced PoC, tagged "exploit" by a source, unverified

• securityfocus.com /bid/11271

  vdb-entry, exploit, patch

• secunia.com /advisories/12666/

  third-party-advisory, patch, vendor-advisory

• aluigi.altervista.org /adv/iceexec-adv.txt

  exploit, vendor-advisory

• securiteam.com /exploits/6X00315BFM.html

  exploit, vendor-advisory

• securitytracker.com /id?1011439

  vdb-entry

• marc.info /?l=bugtraq&m=109640005127644&w=2

  mailing-list

• osvdb.org /10446

  vdb-entry

• marc.info /?l=bugtraq&m=109674593230539&w=2

  mailing-list

• exchange.xforce.ibmcloud.com /vulnerabilities/17538

  vdb-entry

• CVE List CVE-2004-1561
• NVD CVE-2004-1561

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.