CVE-2008-0070 Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which trig...
MediumCVSS 4.6
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request that specifies a large number of array dimensions, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| orb networks orb | = 2.0.1014 | No fix listed |
References
- 28203 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 28431 vdb-entry
- ADV-2008-0984 vdb-entry
- orb-dimensions-bo(41410) vdb-entry