Lucene search

K
cveMitreCVE-2008-4470
HistoryOct 07, 2008 - 12:31 a.m.

CVE-2008-4470

2008-10-0700:31:08
CWE-119
mitre
web.nvd.nist.gov
22
cve-2008-4470
numark cue
buffer overflow
denial of service
arbitrary code
m3u playlist
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.005

Percentile

77.0%

Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service (application crash) or execute arbitrary code via an M3U playlist file that contains a long absolute pathname.

Affected configurations

Nvd
Node
numarkcueMatch5.0rev2
VendorProductVersionCPE
numarkcue5.0cpe:2.3:a:numark:cue:5.0:rev2:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.005

Percentile

77.0%

Related for CVE-2008-4470