Ubuntu.comUB:CVE-2006-4197CVE-2006-4197
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.214 Low
EPSS
Percentile
96.5%
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz
Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote
attackers to cause a denial of service (crash) or execute arbitrary code
via (1) a long Location header by the HTTP server, which triggers an
overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long
URL in RDF data, as demonstrated by a URL in an rdf:resource field in an
RDF XML document, which triggers overflows in many functions in
lib/rdfparse.c.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | libmusicbrainz-2.1 | < 2.1.2-2ubuntu3.1 | UNKNOWN |
| ubuntu | 6.10 | noarch | libmusicbrainz-2.1 | < 2.1.2-6ubuntu2 | UNKNOWN |
| ubuntu | 7.04 | noarch | libmusicbrainz-2.1 | < 2.1.2-6ubuntu2 | UNKNOWN |
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.214 Low
EPSS
Percentile
96.5%