ID |
CVE-2006-0720
|
Sažetak |
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file. |
Reference |
|
CVSS |
Base: | 7.6 |
Impact: | 10.0 |
Exploitability: | 4.9 |
|
Pristup |
Vektor | Složenost | Autentikacija |
NETWORK |
HIGH |
NONE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
COMPLETE |
COMPLETE |
COMPLETE |
|
CVSS vektor |
AV:N/AC:H/Au:N/C:C/I:C/A:C |
Zadnje važnije ažuriranje |
19-10-2018 - 15:45 |
Objavljeno |
23-02-2006 - 21:02 |