Lucene search

K
freebsdFreeBSD4D4CAEE0-B939-11DD-A578-0030843D3802
HistoryNov 05, 2008 - 12:00 a.m.

streamripper -- multiple buffer overflows

2008-11-0500:00:00
vuxml.freebsd.org
14

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.141

Percentile

95.7%

Secunia reports:

A boundary error exists within http_parse_sc_header() in lib/http.c
when parsing an overly long HTTP header starting with β€œZwitterion v”.
A boundary error exists within http_get_pls() in lib/http.c when
parsing a specially crafted pls playlist containing an overly long
entry.
A boundary error exists within http_get_m3u() in lib/http.c when
parsing a specially crafted m3u playlist containing an overly long
β€œFile” entry.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchstreamripper<Β 1.64.0UNKNOWN

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.141

Percentile

95.7%