PT-2014-2612 · Cowon · Jetaudio

Publicado 2014-02-05 · Atualizado 2017-08-29 · CVE-2013-2691

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions jetAudio version 8.0.17

Description A stack-based buffer overflow issue exists in the JetMPG.ax module, related to the handling of MPEG2 transport streams. This allows remote attackers to execute arbitrary code via a crafted MPEG2-TS video file.

Recommendations For jetAudio version 8.0.17, consider disabling the JetMPG.ax module until a patch is available to prevent potential exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-2691

Produtos afetados

Jetaudio

Referências · 5

• http://secunia.com/advisories/52450 · Aviso do Fabricante
• http://securityfocus.com/bid/59616 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83981 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2691 · Nota de Segurança
• http://osvdb.org/92943 · Nota