Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-6251
HistoryDec 04, 2006 - 11:28 a.m.

CVE-2006-6251

2006-12-0411:28:00
[email protected]
web.nvd.nist.gov
27
vuplayer
buffer overflow
cve-2006-6251
remote code execution
m3u unc name attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.86 High

EPSS

Percentile

98.6%

JSON

Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file, aka an “M3U UNC Name” attack.

Affected configurations

NVD
Node
vuplayervuplayerRange≤2.44
CPENameOperatorVersion
vuplayer:vuplayervuplayerle2.44

Related

nvd 1
packetstorm 2
zeroscience 1
cvelist 1
cert 1
nvd
nvd
CVE-2006-6251
2006-12-04 11:28:00
packetstorm
packetstorm
vuplayer_bof.pl.txt
2008-08-18 00:00:00
VUPlayer M3U Buffer Overflow
2009-11-26 00:00:00
zeroscience
zeroscience
VUPlayer 2.49 M3U Playlist File Remote Buffer Overflow Exploit
2008-08-18 00:00:00
cvelist
cvelist
CVE-2006-6251
2006-12-04 11:00:00
cert
cert
VUPlayer malformed playlist buffer overflow
2007-09-06 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.86 High

EPSS

Percentile

98.6%

JSON
Related for CVE-2006-6251
nvd1packetstorm2zeroscience1cvelist1cert1