Lucene search

K
ubuntuUbuntuUSN-309-1
HistoryJul 06, 2006 - 12:00 a.m.

libmms vulnerability

2006-07-0600:00:00
ubuntu.com
21

6.5 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.3%

Releases

  • Ubuntu 5.10

Details

Several buffer overflows were found in libmms. By tricking a user into
opening a specially crafted remote multimedia stream with an
application using libmms, a remote attacker could overwrite an
arbitrary memory portion with zeros, thereby crashing the program.

In Ubuntu 5.10, this affects the GStreamer MMS plugin
(gstreamer0.8-mms). Other Ubuntu releases do not support this library.

OSVersionArchitecturePackageVersionFilename
Ubuntu5.10noarchlibmms0< 0.1-0ubuntu1.1UNKNOWN

6.5 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.3%