CVE-2005-0706 Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.
HighCVSS 7.5
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| grip | = 2.9.6 | No fix listed |
| grip | = 3.1.2 | No fix listed |
| grip | = 3.1.4 | No fix listed |
| grip | = 3.2.0 | No fix listed |
| debian/grip(Debian:13) | < 3.2.0-4 | 3.2.0-4 |
| debian/grip(Debian:14) | < 3.2.0-4 | 3.2.0-4 |
| debian/libcdaudio(Debian:12) | < 0.99.9-2.1 | 0.99.9-2.1 |
| debian/libcdaudio(Debian:13) | < 0.99.9-2.1 | 0.99.9-2.1 |
| debian/libcdaudio(Debian:14) | < 0.99.9-2.1 | 0.99.9-2.1 |
References
- rpmfind.net
- 32803 third-party-advisory
- 33389 third-party-advisory
- 33824 third-party-advisory
- GLSA-200503-21 patch vendor-advisory
- sourceforge.net
- sourceforge.net vendor-advisory
- RHSA-2005:304 vendor-advisory
- RHSA-2009:0005 vendor-advisory
- 12770 vdb-entry
- FLSA:152919 vendor-advisory
- grip-cddb-bo(19648) vdb-entry
- oval:org.mitre.oval:def:10768 signature vdb-entry
- FEDORA-2008-9604 vendor-advisory
- FEDORA-2008-9521 vendor-advisory
- FEDORA-2008-11956 vendor-advisory
- Debian Security Tracker CVE-2005-0706 vendor-advisory
- bugs.debian.org issue-tracking