CVE-2011-5052 Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request.

MediumCVSS 6.8 EPSS 29.7% Framework module Public exploit

Published: 2012-01-04 21:00
Updated: 2026-06-17 02:35
Exploit status: Public exploit available

Description

Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request.

Affected products

Product	Affected versions	Fixed in
cocsoft stream down	= 6.8	No fix listed

References

78043 vdb-entry
47343 third-party-advisory vendor-advisory
18283 exploit
cocsoftstreamdown-response-bo(72009) vdb-entry

CVSS v2.0

6.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 29.69% (percentile 98.2)
CWE: CWE-119

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

CoCSoft StreamDown 6.8.0 Buffer Overflow Framework module · Metasploit Framework (Rapid7) · 2011-12-27
CoCSoft Stream Down 6.8.0 - Universal (Metasploit) Exploit · Exploit Database (OffSec) · 2011-12-27