CVE-2006-4197
28Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 14%
de la publicación al arma0 días
Publicada en NVD17 ago
1ª PoC14 ago
probabilidad de explotación
14%top 4% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28384⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://aluigi.altervista.org/adv/brainzbof-adv.txthttp://secunia.com/advisories/21404http://secunia.com/advisories/21668http://secunia.com/advisories/21699http://secunia.com/advisories/22191http://secunia.com/advisories/22393http://secunia.com/advisories/22517http://secunia.com/advisories/22639http://security.gentoo.org/glsa/glsa-200610-09.xmlhttp://securityreason.com/securityalert/1399http://securitytracker.com/id?1016691https://exchange.xforce.ibmcloud.com/vulnerabilities/28367