Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2009-3996
HistoryDec 18, 2009 - 7:30 p.m.

CVE-2009-3996

2009-12-1819:30:00
Debian Security Bug Tracker
security-tracker.debian.org
6

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.208 Low

EPSS

Percentile

96.4%

Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file.

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.208 Low

EPSS

Percentile

96.4%