Lucene search

MitreCVE-2008-1973

HistoryApr 27, 2008 - 6:05 p.m.

CVE-2008-1973

2008-04-2718:05:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-1973

buffer overflow

subedit player

denial of service

remote attackers

arbitrary code

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.114

Percentile

95.2%

JSON

Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long subtitle file.

Affected configurations

Nvd

Node

artur_sikorasubedit_playerMatch4056

artur_sikorasubedit_playerMatch4066

VendorProductVersionCPE
artur_sikorasubedit_player4056cpe:2.3:a:artur_sikora:subedit_player:4056:*:*:*:*:*:*:*
artur_sikorasubedit_player4066cpe:2.3:a:artur_sikora:subedit_player:4066:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
artur_sikora	subedit_player	4056	cpe:2.3:a:artur_sikora:subedit_player:4056:::::::*
artur_sikora	subedit_player	4066	cpe:2.3:a:artur_sikora:subedit_player:4066:::::::*

References

secunia.com/advisories/29904

www.securityfocus.com/bid/28858

www.vupen.com/english/advisories/2008/1306

exchange.xforce.ibmcloud.com/vulnerabilities/41913

www.exploit-db.com/exploits/5472

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.114

Percentile

95.2%

JSON

Related for CVE-2008-1973