CVE-2004-1793: Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated u...

Security readout for executives and security teams

CVE-2004-1793 affects legacy YaSoft Switch Off 2.3 and earlier. An authenticated remote user could send an overly long message value and potentially run code on the affected system. This is mainly a concern where old Switch Off installations remain reachable. Likely exposure is limited to legacy YaSoft Switch Off 2.3 and earlier deployments where authenticated remote users can reach action.htm and the SendMsg action. Confirm whether the product still exists in software inventory or old admin hosts. Prioritize discovery first. The vulnerability is old, but code execution on a reachable administrative utility can still create serious business risk if forgotten legacy systems remain online. Mitigation focus: Check vendor and advisory guidance for fixed or recommended versions.; Remove or retire YaSoft Switch Off 2.3 and earlier if no longer required.; Restrict access to the affected interface to trusted administrative hosts..

Prepared

Jun 29, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.