CVE-2006-2910

CVE-2006-2910

Medium · published July 5, 2006

CVSS v2.0
5.1
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed.

The record
Technical detail
CVSS v2.0
5.1 · MEDIUM
Vector
AV:N/AC:H/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.02119 · 81.7th percentile
Published
2006-07-05T22:05Z
Affected products (1)
ProductVersionsFixed in
cowon_america/jetaudioall versions—
References (10)
http://secunia.com/advisories/19456 · [email protected]http://secunia.com/secunia_research/2006-45/advisory/ · [email protected]http://www.securityfocus.com/bid/18825 · [email protected]http://www.vupen.com/english/advisories/2006/2667 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/27593 · [email protected]http://secunia.com/advisories/19456 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/secunia_research/2006-45/advisory/ · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/18825 · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2667 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27593 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 05 JUL 18:00Z
    Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such…
    cvelistv5