CVE-2007-1344

Published: Mar 8, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the (1) urlParse function, which causes a stack-based overflow and the (2) ReplaceString function, which causes a heap-based overflow. NOTE: some of these details are obtained from third party information.

Affected (6)

Products: Xiph: Icecast Ezstream

Xiph

1 product

Icecast Ezstream

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Xiph Icecast Ezstream	Up to 0.1.0
Xiph Icecast Ezstream	Up to 0.1.1
Xiph Icecast Ezstream	Up to 0.1.2
Xiph Icecast Ezstream	Up to 0.1.3
Xiph Icecast Ezstream	Up to 0.2.0
Xiph Icecast Ezstream	Up to 0.2.1