Lucene search

K
cve[email protected]CVE-2008-3877
HistorySep 02, 2008 - 3:41 p.m.

CVE-2008-3877

2008-09-0215:41:00
CWE-119
web.nvd.nist.gov
24
4
cve-2008-3877
acoustica mixcraft
buffer overflow
arbitrary code execution
user-assisted attackers
.mx4 file

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.052 Low

EPSS

Percentile

93.1%

Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execute arbitrary code via a crafted .mx4 file. NOTE: it was later reported that version 3 is also affected.

Affected configurations

NVD
Node
acousticamixcraftMatch3.0
OR
acousticamixcraftMatch4.1
OR
acousticamixcraftMatch4.2

Social References

More

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.052 Low

EPSS

Percentile

93.1%

Related for CVE-2008-3877