NVD

Id
53976  
Name
CVE-2007-1804  
Description
PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent on TCP port 9875, which triggers a p->export assertion failure in do_read; (2) a PA_PSTREAM_DESCRIPTOR_LENGTH value of 0 sent on TCP port 9875, which triggers a length assertion failure in pa_memblock_new; or (3) an empty packet on UDP port 9875, which triggers a t assertion failure in pa_sdp_parse; and allows remote authenticated users to cause a denial of service (daemon crash) via a crafted packet on TCP port 9875 that (4) triggers a maxlength assertion failure in pa_memblockq_new, (5) triggers a size assertion failure in pa_xmalloc, or (6) plays a certain sound file.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-04-02  
Modified Date
2011-03-07  
Seq
2007-1804  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273710 53976 CVE-2007-1804 http://aluigi.altervista.org/adv/pulsex-adv.txt  View
273711 53976 CVE-2007-1804 http://aluigi.org/poc/pulsex.zip  View
273712 53976 CVE-2007-1804 MDVSA-2008:065  View
273713 53976 CVE-2007-1804 SUSE-SR:2007:013  View
273714 53976 CVE-2007-1804 23240  View
273715 53976 CVE-2007-1804 USN-465-1  View
273716 53976 CVE-2007-1804 ADV-2007-1214  View
273717 53976 CVE-2007-1804 pulseaudio-assert-dos(33315)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56641 JVNDB-2007-005333 PulseAudio におけるサービス運用妨害 (DoS) の脆弱性 PulseAudio には、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-1804 25159 CVE-2007-1804 53976 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005333.html 2007-04-02 2012-12-20 View