CVE-2008-2363

2008-06-0221:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-2363

pan

denial of service

application crash

heap-based buffer overflow

nvd

security vulnerabilities

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.041 Low

EPSS

Percentile

92.1%

JSON

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow.

CPENameOperatorVersion
pan:panpaneq0.109
pan:panpaneq0.124
pan:panpaneq0.106
pan:panpaneq0.113
pan:panpaneq0.116
pan:panpaneq0.131
pan:panpaneq0.107
pan:panpaneq0.122
pan:panpaneq0.125
pan:panpaneq0.114

CPE	Name	Operator	Version
pan:pan	pan	eq	0.109
pan:pan	pan	eq	0.124
pan:pan	pan	eq	0.106
pan:pan	pan	eq	0.113
pan:pan	pan	eq	0.116
pan:pan	pan	eq	0.131
pan:pan	pan	eq	0.107
pan:pan	pan	eq	0.122
pan:pan	pan	eq	0.125
pan:pan	pan	eq	0.114