Lucene search

K
cve[email protected]CVE-2011-5170
HistorySep 15, 2012 - 5:55 p.m.

CVE-2011-5170

2012-09-1517:55:05
CWE-119
web.nvd.nist.gov
23
cve-2011-5170
castillo bueno systems
ccmplayer 1.5
buffer overflow
remote code execution
m3u playlist

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.935 High

EPSS

Percentile

99.1%

Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist.

Affected configurations

NVD
Node
castillobuenoccmplayerMatch1.5

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.935 High

EPSS

Percentile

99.1%