NVD

Id
62838  
Name
CVE-2006-4197  
Description
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-17  
Modified Date
2016-12-07  
Seq
2006-4197  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326727 62838 CVE-2006-4197 http://aluigi.altervista.org/adv/brainzbof-adv.txt  View
326728 62838 CVE-2006-4197 GLSA-200610-09  View
326729 62838 CVE-2006-4197 1399  View
326730 62838 CVE-2006-4197 1016691  View
326731 62838 CVE-2006-4197 DSA-1162  View
326732 62838 CVE-2006-4197 MDKSA-2006:157  View
326733 62838 CVE-2006-4197 SUSE-SR:2006:025  View
326734 62838 CVE-2006-4197 20060813 Multiple buffer-overflows in libmusicbrainz 2.1.2  View
326735 62838 CVE-2006-4197 20060830 rPSA-2006-0161-1 libmusicbrainz  View
326736 62838 CVE-2006-4197 19508  View
326737 62838 CVE-2006-4197 libmusicbrainz-mbhttpdownload-bo(28367)  View
326738 62838 CVE-2006-4197 libmusicbrainz-rdfparse-bo(28368)  View
326739 62838 CVE-2006-4197 https://issues.rpath.com/browse/RPL-610  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59695 JVNDB-2006-001961 libmusicbrainz および SVN 8406 におけるバッファオーバーフローの脆弱性 libmusicbrainz および SVN 8406 には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-4197 20299 CVE-2006-4197 62838 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001961.html 2006-08-17 2012-09-25 View