CVEvulnerability

CVE-2006-2910

5.1 MEDIUM Published 2006-07-05 Modified 2026-09-23 Official page ↗

Status: Modified
Published: 2006-07-05
Last modified: 2026-09-23
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed.

Affected configurations

• cowon america jetaudio basic 6.2.6.8330

References

http://secunia.com/advisories/19456 Vendor Advisory
http://secunia.com/secunia_research/2006-45/advisory/ Vendor Advisory
http://www.securityfocus.com/bid/18825 www.securityfocus.com
http://www.vupen.com/english/advisories/2006/2667 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27593 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/19456 Vendor Advisory
http://secunia.com/secunia_research/2006-45/advisory/ Vendor Advisory
http://www.securityfocus.com/bid/18825 www.securityfocus.com
http://www.vupen.com/english/advisories/2006/2667 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27593 exchange.xforce.ibmcloud.com