Lucene search
HistoryOct 30, 2007 - 7:46 p.m.
CVE-2007-5709
cve-2007-5709
sony
sonicstage
connect player
buffer overflow
remote code execution
m3u file
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.163 Low
EPSS
Percentile
96.0%
Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file.
Affected configurations
Node
sonysonicstage_connect_playerMatch4.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| sony:sonicstage_connect_player | sony sonicstage connect player | eq | 4.3 |
References
Social References
More
Related
prion
prion
Stack overflow
2007-10-30 19:46:00
cvelist
cvelist
CVE-2007-5709
2007-10-30 19:00:00
jvn
jvn
JVN#66291445 SonicStage CP buffer overflow vulnerability
2007-12-04 00:00:00
nvd
nvd
CVE-2007-5709
2007-10-30 19:46:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.163 Low
EPSS
Percentile
96.0%
Related for CVE-2007-5709