Vulnerability Details CVE-2005-0706
Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html
- http://secunia.com/advisories/32803
- http://secunia.com/advisories/33389
- http://secunia.com/advisories/33824
- http://security.gentoo.org/glsa/glsa-200503-21.xml
- http://sourceforge.net/tracker/index.php?func=detail&aid=1160134&group_id=3714&atid=303714
- http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714
- http://www.redhat.com/support/errata/RHSA-2005-304.html
- http://www.redhat.com/support/errata/RHSA-2009-0005.html
- http://www.securityfocus.com/bid/12770
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152919
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19648
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10768
- https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00429.html
- https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00490.html
- https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00188.html
- http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html
- http://secunia.com/advisories/32803
- http://secunia.com/advisories/33389
- http://secunia.com/advisories/33824
- http://security.gentoo.org/glsa/glsa-200503-21.xml
- http://sourceforge.net/tracker/index.php?func=detail&aid=1160134&group_id=3714&atid=303714
- http://sourceforge.net/tracker/index.php?func=detail&aid=834724&group_id=3714&atid=103714
- http://www.redhat.com/support/errata/RHSA-2005-304.html
- http://www.redhat.com/support/errata/RHSA-2009-0005.html
- http://www.securityfocus.com/bid/12770
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152919
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19648
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10768
- https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00429.html
- https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00490.html
- https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00188.html