CVE

Id
33558  
CVE No.
CVE-2008-3441  
Status
Candidate  
Description
Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.  
Phase
Assigned (20080801)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
365321 33558 CVE-2008-3441 FULLDISC:20080728 Tool release: [evilgrade] - Using DNS cache poisoning to exploit poor update implementations  View
365322 33558 CVE-2008-3441 URL:http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html  View
365323 33558 CVE-2008-3441 MISC:http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf  View
365324 33558 CVE-2008-3441 MISC:http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz  View
365325 33558 CVE-2008-3441 OVAL:oval:org.mitre.oval:def:15225  View
365326 33558 CVE-2008-3441 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15225  View
365327 33558 CVE-2008-3441 SECTRACK:1020582  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50786 JVNDB-2008-006096 PMR の index.php における SQL インジェクションの脆弱性 phpMyRealty (PMR) の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3445 33558 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006096.html  View