Lucene search

K
cve[email protected]CVE-2008-4504
HistoryOct 09, 2008 - 6:00 p.m.

CVE-2008-4504

2008-10-0918:00:01
CWE-119
web.nvd.nist.gov
22
cve-2008-4504
heap-based buffer overflow
mplayer.exe
herosoft inc.
hero dvd player 3.0.8
remote code execution
m3u file

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a “long entry.” NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD
Node
herosofthero_dvd_playerMatch3.0.8

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

Related for CVE-2008-4504