Lucene search
HistoryJul 08, 2009 - 3:30 p.m.
CVE-2009-2364
cve-2009-2364
mp3-nator 2.0
buffer overflow
remote code execution
nvd
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.4 High
AI Score
Confidence
High
0.055 Low
EPSS
Percentile
93.2%
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in a .plf file and (2) a long string in the listdata.dat file, possibly related to a track entry.
Affected configurations
Node
mp3-natormp3-natorMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| mp3-nator:mp3-nator | mp3-nator | eq | 2.0 |
Related
nvd
nvd
CVE-2009-2364
2009-07-08 15:30:01
prion
prion
Stack overflow
2009-07-08 15:30:00
cvelist
cvelist
CVE-2009-2364
2009-07-08 15:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.4 High
AI Score
Confidence
High
0.055 Low
EPSS
Percentile
93.2%
Related for CVE-2009-2364