Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2948
HistoryJun 07, 2007 - 12:00 a.m.

CVE-2007-2948

2007-06-0700:00:00
ubuntu.com
ubuntu.com
8

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.231 Low

EPSS

Percentile

96.5%

Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer
before 1.0rc1try3 allow remote attackers to execute arbitrary code via a
CDDB entry with a long (1) album title or (2) category.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmplayer< 2:0.99+1.0pre7try2+cvs20060117-0ubuntu8.1UNKNOWN
ubuntu6.10noarchmplayer< 2:0.99+1.0pre8-0ubuntu8.2UNKNOWN
ubuntu7.04noarchmplayer< 1.0~rc1-0ubuntu9.1UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.231 Low

EPSS

Percentile

96.5%