Lucene search

MitreCVE-2012-5917

HistoryNov 17, 2012 - 9:55 p.m.

CVE-2012-5917

2012-11-1721:55:06

CWE-119

mitre

web.nvd.nist.gov

snackamp

cve-2012-5917

denial of service

aiff file

security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.123

Percentile

95.5%

JSON

SnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a long string in an aiff file.

Affected configurations

Nvd

Node

tom_wilkasonsnackampMatch3.1.3

VendorProductVersionCPE
tom_wilkasonsnackamp3.1.3cpe:2.3:a:tom_wilkason:snackamp:3.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tom_wilkason	snackamp	3.1.3	cpe:2.3:a:tom_wilkason:snackamp:3.1.3:::::::*

References

osvdb.org/80805

www.exploit-db.com/exploits/18692

www.securityfocus.com/bid/52842

exchange.xforce.ibmcloud.com/vulnerabilities/74528

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.123

Percentile

95.5%

JSON

Related for CVE-2012-5917