Lucene search

K
cveMitreCVE-2008-5824
HistoryJan 02, 2009 - 7:30 p.m.

CVE-2008-5824

2009-01-0219:30:01
CWE-119
mitre
web.nvd.nist.gov
41
cve-2008-5824
buffer overflow
libaudiofile
denial of service
arbitrary code execution
wav file

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.006

Percentile

79.1%

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file.

Affected configurations

Nvd
Node
68kaudiofileMatch0.2.6
VendorProductVersionCPE
68kaudiofile0.2.6cpe:2.3:a:68k:audiofile:0.2.6:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.006

Percentile

79.1%