Kazaa: >> Kazaa Media Desktop >> 2.0 Security Vulnerabilities
Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter.
CVSS Score
7.5
EPSS Score
0.069
Published
2004-12-31
KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local security zone, which could allow remote attackers to view local files and possibly execute arbitrary code.
CVSS Score
7.5
EPSS Score
0.019
Published
2003-12-31
Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.
CVSS Score
9.0
EPSS Score
0.028
Published
2003-12-31