Lucene search

MitreCVE-2007-4392

HistoryAug 17, 2007 - 10:17 p.m.

CVE-2007-4392

2007-08-1722:17:00

mitre

web.nvd.nist.gov

cve-2007-4392

winamp 5.35

denial of service

m3u file

stack overflow

application crash

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.1

Confidence

High

EPSS

0.019

Percentile

88.6%

JSON

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Affected configurations

Nvd

Node

nullsoftwinampMatch5.35

VendorProductVersionCPE
nullsoftwinamp5.35cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nullsoft	winamp	5.35	cpe:2.3:a:nullsoft:winamp:5.35:::::::*

References

morph3us.org/advisories/20070730-winamp-5.35.txt

securityreason.com/securityalert/3040

www.securityfocus.com/archive/1/475161/100/200/threaded

www.securityfocus.com/archive/1/475183/100/200/threaded

www.securityfocus.com/archive/1/475260/100/200/threaded

www.securityfocus.com/archive/1/475489/100/200/threaded

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15504

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.1

Confidence

High

EPSS

0.019

Percentile

88.6%

JSON

Related for CVE-2007-4392