5.1

CVE-2006-2910

Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cowon America ≫ Jetaudio Versionbasic_6.2.6.8330
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.08% 0.791
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/19456
Vendor Advisory
http://secunia.com/secunia_research/2006-45/advisory/
Vendor Advisory
http://www.securityfocus.com/bid/18825
http://www.vupen.com/english/advisories/2006/2667
https://exchange.xforce.ibmcloud.com/vulnerabilities/27593