Vulnerability CVE-2006-2910


Published: 2006-07-05   Modified: 2012-02-12

Description:
Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed.

CVSS2 => (AV:N/AC:H/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.1/10
6.4/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Cowon america -> Jetaudio 

 References:
http://xforce.iss.net/xforce/xfdb/27593
http://www.vupen.com/english/advisories/2006/2667
http://www.securityfocus.com/bid/18825
http://secunia.com/secunia_research/2006-45/advisory/
http://secunia.com/advisories/19456

Copyright 2024, cxsecurity.com

 

Back to Top