Lucene search

K
cve[email protected]CVE-2014-9448
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-9448

2022-10-0316:20:41
CWE-119
web.nvd.nist.gov
19
cve-2014-9448
buffer overflow
mini-stream rm-mp3 converter
wax file
code execution
denial of service
remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%

Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long string in a WAX file.

Affected configurations

NVD
Node
mini-streamrm-mp3_converterMatch3.1.2.1.2010.03.30

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

High

0.046 Low

EPSS

Percentile

92.6%

Related for CVE-2014-9448