CVE-2006-2910

Published Jul 5, 2006

Last updated 7 years ago

Overview

Description: Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed.
Source: PSIRT-CNA@flexerasoftware.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5.1
Impact score: 6.4
Exploitability score: 4.9
Vector string: AV:N/AC:H/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cowon_america:jetaudio:basic_6.2.6.8330:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A78D434E-4AC0-4655-A8A1-9A8599B4563E"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References