CVE-2008-4829
7.4 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.141 Low
EPSS
Percentile
95.7%
Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long βZwitterion vβ HTTP header, related to the http_parse_sc_header function; (2) a crafted pls playlist with a long entry, related to the http_get_pls function; or (3) a crafted m3u playlist with a long File entry, related to the http_get_m3u function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| streamripper:streamripper | streamripper | eq | 1.63.5 |
References
secunia.com/advisories/32562
secunia.com/advisories/33052
secunia.com/advisories/33061
secunia.com/secunia_research/2008-50/
securityreason.com/securityalert/4647
www.debian.org/security/2008/dsa-1683
www.osvdb.org/49997
www.securityfocus.com/archive/1/498486/100/0/threaded
www.securityfocus.com/bid/32356
www.vupen.com/english/advisories/2008/3207
Related
7.4 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.141 Low
EPSS
Percentile
95.7%