CVE

Id
27749  
CVE No.
CVE-2007-4392  
Status
Candidate  
Description
Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.  
Phase
Assigned (20070817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
286020 27749 CVE-2007-4392 BUGTRAQ:20070731 Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability  View
286021 27749 CVE-2007-4392 URL:http://www.securityfocus.com/archive/1/archive/1/475183/100/200/threaded  View
286022 27749 CVE-2007-4392 BUGTRAQ:20070731 [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability  View
286023 27749 CVE-2007-4392 URL:http://www.securityfocus.com/archive/1/archive/1/475161/100/200/threaded  View
286024 27749 CVE-2007-4392 BUGTRAQ:20070801 Re: Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability  View
286025 27749 CVE-2007-4392 URL:http://www.securityfocus.com/archive/1/archive/1/475260/100/200/threaded  View
286026 27749 CVE-2007-4392 BUGTRAQ:20070801 Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion Stack Overflow  View
286027 27749 CVE-2007-4392 URL:http://www.securityfocus.com/archive/1/archive/1/475489/100/200/threaded  View
286028 27749 CVE-2007-4392 MISC:http://morph3us.org/advisories/20070730-winamp-5.35.txt  View
286029 27749 CVE-2007-4392 OVAL:oval:org.mitre.oval:def:15504  View
286030 27749 CVE-2007-4392 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15504  View
286031 27749 CVE-2007-4392 SREASON:3040  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57289 JVNDB-2007-005981 SUSE Linux 上で稼動する findutils-locate パッケージが作成した "コアクリーン" cron ジョブにおける任意のファイルを削除される脆弱性 SUSE Linux 上で稼動する findutils-locate パッケージが作成した "コアクリーン" cron ジョブには、任意のファイルを削除される脆弱性が存在します。 CVE-2007-4394 27749 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005981.html  View