Lucene search

MitreCVE-2010-2009

HistoryMay 21, 2010 - 5:30 p.m.

CVE-2010-2009

2010-05-2117:30:01

CWE-119

mitre

web.nvd.nist.gov

cve-2010-2009

bs.player

buffer overflow

remote code execution

media library

bs.global

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

Low

EPSS

0.023

Percentile

89.9%

JSON

Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in a .MP3 file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

bsplayerbs.playerMatch2.41

bsplayerbs.playerMatch2.51

VendorProductVersionCPE
bsplayerbs.player2.41cpe:2.3:a:bsplayer:bs.player:2.41:*:*:*:*:*:*:*
bsplayerbs.player2.51cpe:2.3:a:bsplayer:bs.player:2.51:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bsplayer	bs.player	2.41	cpe:2.3:a:bsplayer:bs.player:2.41:::::::*
bsplayer	bs.player	2.51	cpe:2.3:a:bsplayer:bs.player:2.51:::::::*

References

secunia.com/advisories/38221

www.packetstormsecurity.org/1003-advisories/bsplayerml-overflow.txt

www.securityfocus.com/bid/38568

www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4932.php

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

Low

EPSS

0.023

Percentile

89.9%

JSON

Related for CVE-2010-2009