Lucene search
HistoryDec 04, 2006 - 11:28 a.m.
CVE-2006-6250
cve-2006-6250
songbird media player
format string vulnerability
denial of service
m3u playlist
remote attackers
crash
unicode converter
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.9 Medium
AI Score
Confidence
High
0.028 Low
EPSS
Percentile
90.8%
Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service (crash) via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked.
Affected configurations
Node
songbirdsongbird_media_playerRange≤0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| songbird:songbird_media_player | songbird songbird media player | le | 0.2 |
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.9 Medium
AI Score
Confidence
High
0.028 Low
EPSS
Percentile
90.8%
Related for CVE-2006-6250