9.3
CVE-2007-1921
- EPSS 4.58%
- Veröffentlicht 10.04.2007 23:19:00
- Zuletzt bearbeitet 16.06.2026 22:38:34
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT file that contains a value that is used as an offset, which triggers memory corruption.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.58% | 0.904 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
http://secunia.com/advisories/24766
http://marc.info/?l=dailydave&m=117589848432659&w=2
http://osvdb.org/34432
http://securityreason.com/securityalert/2541
http://www.piotrbania.com/all/adv/nullsoft-winamp-libsndfile-adv.txt
http://www.securityfocus.com/archive/1/464889/100/0/threaded
http://www.securityfocus.com/bid/23351
http://www.securitytracker.com/id?1017886
http://www.vupen.com/english/advisories/2007/1286
https://exchange.xforce.ibmcloud.com/vulnerabilities/33481