CVE-2007-4448: Undefined Security Weakness

The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service daemon crash via a GRIP command with the ID of -1...

Fedora Core 2 : grip-3.2.0-3.fc2 (2005-202)

This fixes a buffer overflow when the CDDB server returns more than 16 matches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

FreeBSD : grip -- CDDB response multiple matches buffer overflow vulnerability (bcf27002-94c3-11d9-a9e0-0001020eed82)

Joseph VanAndel reports that grip is vulnerability to a buffer overflow vulnerability when receiving more than 16 CDDB responses. This could lead to a crash in grip and potentially execution arbitrary code. A workaround is to disable CDDB lookups. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2005-0706

Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected...

DEBIAN-CVE-2005-0706

Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected...

Mandrake Linux Security Advisory : grip (MDKSA-2005:066)

A buffer overflow bug was found by Joseph VanAndel in the way that grip handles data returned by CDDB servers. If a user connected to a malicious CDDB server, an attacker could execute arbitrary code on the user's machine. The updated packages have been patched to correct these issues...

RHEL 2.1 : grip (RHSA-2005:304)

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...

GLSA-200503-21 : Grip: CDDB response overflow

The remote host is affected by the vulnerability described in GLSA-200503-21 Grip: CDDB response overflow Joseph VanAndel has discovered a buffer overflow in Grip when processing large CDDB results. Impact : A malicious CDDB server could cause Grip to crash by returning more then 16 matches,...

Grip: CDDB response overflow

Background Grip is a GTK+ based audio CD player/ripper. Description Joseph VanAndel has discovered a buffer overflow in Grip when processing large CDDB results. Impact A malicious CDDB server could cause Grip to crash by returning more then 16 matches, potentially allowing the execution of...

[SA14441] grip CDDB Multiple Matches Buffer Overflow Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

CVE-2005-0706

Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected...

CVE-2005-0706

Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected...

CVE-2005-0706

CVE-2005-0706 describes a buffer overflow in the GNOME VFS code path (gnome-vfs/gnome-vfs2) when handling data from CDDB servers. The flaw could allow a remote attacker to cause a crash (DoS) and, in some cases, execute arbitrary code by returning an excessive number of CDDB matches. Public advis...

CVE-2005-0706: Undefined Security Weakness

Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected...