CVE-2008-0550 Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflo...

HighCVSS 10.0 EPSS 53.8% Framework module Public exploit

Published: 2008-02-01 21:41
Updated: 2026-06-17 01:49
Exploit status: Public exploit available

Description

Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.

Affected products

Product	Affected versions	Fixed in
radio toolbox steamcast	<= 0.9.75	No fix listed

References

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 53.78% (percentile 99.0)
CWE: CWE-189

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Streamcast HTTP User-Agent Buffer Overflow Framework module · Metasploit Framework (Rapid7) · 2008-01-24
Streamcast 0.9.75 - HTTP User-Agent Buffer Overflow (Metasploit) Exploit · Exploit Database (OffSec) · 2010-06-11