5

CVE-2007-6103

Exploit
I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet that contains zero in the size field in its header, which is improperly handled by the Receiver::processPacket function; and (2) a denial of service (daemon crash) via an (a) IHU_INFO_INIT or a (b) IHU_INFO_RING packet that does not specify the mode, which is improperly handled by the Player::ring function in Player.cpp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ihu ≫ I Hear U Version <= 0.5.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.96% 0.911
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://aluigi.altervista.org/adv/ihudos-adv.txt
Exploit
http://osvdb.org/42395
http://osvdb.org/42396
http://secunia.com/advisories/27754
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=355409&group_id=75788
http://www.securityfocus.com/bid/26516
https://exchange.xforce.ibmcloud.com/vulnerabilities/38568
https://exchange.xforce.ibmcloud.com/vulnerabilities/38569