CVE-2006-3600 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-3600
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-3600

Description: Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers to cause a denial of service (application crash) and possibly execute code via a long (1) Album release date (MBE_ReleaseGetDate), (2) data, or (3) error strings.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/27728 UBUNTU http://www.ubuntu.com/usn/usn-318-1 ST 1016539 SAID Secunia Advisory: SA21026 Secunia Advisory: SA21027 Secunia Advisory: SA21106 Secunia Advisory: SA21277 Secunia Advisory: SA21323 OSVDB 27094 MISC http://bugs.musicbrainz.org/ticket/1764 MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:126 GENTOO http://security.gentoo.org/glsa/glsa-200607-11.xml DEBIAN http://www.debian.org/security/2006/dsa-1135 BID 18961

Return to the previous page.