Lucene search

[email protected]NVD:CVE-2007-4392

HistoryAug 17, 2007 - 10:17 p.m.

CVE-2007-4392

2007-08-1722:17:00

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

Confidence

High

EPSS

0.019

Percentile

88.6%

JSON

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Affected configurations

Nvd

Node

nullsoftwinampMatch5.35

VendorProductVersionCPE
nullsoftwinamp5.35cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nullsoft	winamp	5.35	cpe:2.3:a:nullsoft:winamp:5.35:::::::*

References

morph3us.org/advisories/20070730-winamp-5.35.txt

securityreason.com/securityalert/3040

www.securityfocus.com/archive/1/475161/100/200/threaded

www.securityfocus.com/archive/1/475183/100/200/threaded

www.securityfocus.com/archive/1/475260/100/200/threaded

www.securityfocus.com/archive/1/475489/100/200/threaded

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15504

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

Confidence

High

EPSS

0.019

Percentile

88.6%

JSON

Related for NVD:CVE-2007-4392

cvelist1 prion1 cve1