| Vulnerability Name: | CVE-2008-5030 (CCN-46392) | ||||||||||||||||
| Assigned: | 2008-11-05 | ||||||||||||||||
| Published: | 2008-11-05 | ||||||||||||||||
| Updated: | 2017-08-08 | ||||||||||||||||
| Summary: | Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data. | ||||||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C) 7.0 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:UR)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:UR)
| ||||||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2008-5030 Source: CCN Type: libcdaudio Web page libcdaudio Source: SUSE Type: UNKNOWN SUSE-SR:2008:024 Source: CCN Type: gmane Mailing List, Thomas Biege | 5 Nov 09:06 CVE request: libcdaudio Source: SECUNIA Type: Vendor Advisory 32678 Source: SECUNIA Type: Vendor Advisory 34353 Source: GENTOO Type: UNKNOWN GLSA-200903-31 Source: CCN Type: SourceForge.net: Detail: 1288043 buffer overflow in cddb_read_disc_data Source: MISC Type: UNKNOWN http://sourceforge.net/tracker/index.php?func=detail&aid=1288043&group_id=27134&atid=389442 Source: DEBIAN Type: UNKNOWN DSA-1665 Source: DEBIAN Type: DSA-1665 libcdaudio -- heap overflow Source: CCN Type: GLSA-200903-31 libcdaudio: User-assisted execution of arbitrary code Source: MANDRIVA Type: UNKNOWN MDVSA-2008:233 Source: MLIST Type: UNKNOWN [oss-security] 20081105 CVE request: libcdaudio Source: MLIST Type: UNKNOWN [oss-security] 20081107 Re: CVE request: libcdaudio Source: MLIST Type: UNKNOWN [oss-security] 20081111 Re: CVE request: libcdaudio Source: MLIST Type: UNKNOWN [oss-security] 20081111 Re: CVE request: libcdaudio Source: CCN Type: OSVDB ID: 49821 libcdaudio cddb.c cddb_read_disc_data Function CDDB Data Handling Remote Overflow Source: BID Type: UNKNOWN 32122 Source: CCN Type: BID-32122 libcdaudio 'cddb.c' Remote Heap Buffer Overflow Vulnerability Source: VUPEN Type: Vendor Advisory ADV-2008-3132 Source: XF Type: UNKNOWN libcdaudio-cddb-bo(46392) Source: XF Type: UNKNOWN libcdaudio-cddb-bo(46392) | ||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||
| Oval Definitions | |||||||||||||||||
| |||||||||||||||||
| BACK | |||||||||||||||||