streamripper - potential code execution

2008-12-0800:00:00

Google

osv.dev

0.141 Low

EPSS

Percentile

95.7%

Multiple buffer overflows involving HTTP header and playlist parsing
have been discovered in streamripper (CVE-2007-4337, CVE-2008-4829).

For the stable distribution (etch), these problems have been fixed in
version 1.61.27-1+etch1.

For the unstable distribution (sid) and the testing distribution
(lenny), these problems have been fixed in version 1.63.5-2.

We recommend that you upgrade your streamripper package.

CPENameOperatorVersion
streamrippereq1.61.27-1

CPE	Name	Operator	Version
	streamripper	eq	1.61.27-1

References

www.debian.org/security/2008/dsa-1683

0.141 Low

EPSS

Percentile

95.7%

Related for OSV:DSA-1683-1