Lucene search

K
cve[email protected]CVE-2008-3182
HistoryJul 15, 2008 - 6:41 p.m.

CVE-2008-3182

2008-07-1518:41:00
CWE-119
web.nvd.nist.gov
25
cve-2008-3182
stack-based buffer overflow
dap.exe
download accelerator plus
remote code execution
m3u file
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.14 Low

EPSS

Percentile

95.7%

Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U (.m3u) file containing a long MP3 URL.

Affected configurations

NVD
Node
speedbitdownload_accelerator_plusMatch7.0.1.3
OR
speedbitdownload_accelerator_plusMatch8
OR
speedbitdownload_accelerator_plusMatch8.6.6.3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.14 Low

EPSS

Percentile

95.7%

Related for CVE-2008-3182