NVD

Id
47822  
Name
CVE-2009-0490  
Description
Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-02-09  
Modified Date
2011-03-07  
Seq
2009-0490  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239553 47822 CVE-2009-0490 http://bugs.gentoo.org/show_bug.cgi?id=253493  View
239554 47822 CVE-2009-0490 SUSE-SR:2009:004  View
239555 47822 CVE-2009-0490 [audacity-devel] 20090110 Audacity "String_parse::get_nonspace_quoted()" Buffer Overflow  View
239556 47822 CVE-2009-0490 7634  View
239557 47822 CVE-2009-0490 33090  View
239558 47822 CVE-2009-0490 ADV-2009-0008  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42232 JVNDB-2009-003239 Audacity の lib-src/allegro/strparse.cpp の String_parse::get_nonspace_quoted 関数におけるスタックベースのバッファオーバーフローの脆弱性 Audacity の lib-src/allegro/strparse.cpp の String_parse::get_nonspace_quoted 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0490 37921 CVE-2009-0490 47822 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003239.html 2009-02-09 2012-06-26 View