Lucene search

K
cve[email protected]CVE-2005-4648
HistoryJan 12, 2006 - 11:00 a.m.

CVE-2005-4648

2006-01-1211:00:00
web.nvd.nist.gov
31
cve-2005-4648
buffer overflow
dbpoweramp
music converter
denial of service
arbitrary code
.m3u
security vulnerability

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.111 Low

EPSS

Percentile

95.2%

Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe, allows user-assisted attackers to cause a denial of service or execute arbitrary code via a .m3u playlist with a long entry, possibly involving large field names, as demonstrated by SecuBox.Labs.m3u. NOTE: this issue might be the same as the .m3u vulnerability in CVE-2004-1569, but if so, then CD:SF-LOC suggests creating a different identifier since the .m3u issue would affect different versions than the .pls issue.

Affected configurations

NVD
Node
illustratedbpoweramp_music_converterRange11.5

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.111 Low

EPSS

Percentile

95.2%