PT-2014-2612 · Cowon · Jetaudio

Published 2014-02-05 · Updated 2017-08-29 · CVE-2013-2691

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions jetAudio version 8.0.17

Description A stack-based buffer overflow issue exists in the JetMPG.ax module, related to the handling of MPEG2 transport streams. This allows remote attackers to execute arbitrary code via a crafted MPEG2-TS video file.

Recommendations For jetAudio version 8.0.17, consider disabling the JetMPG.ax module until a patch is available to prevent potential exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-2691

Affected Products

Jetaudio

References · 5

• http://secunia.com/advisories/52450 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2691 · Security Note
• http://securityfocus.com/bid/59616 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83981 · Note
• http://osvdb.org/92943 · Note