CVE-2008-5030

Published: Nov 10, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data.

Affected (1)

Products: Libcaudio: Libcaudio

Libcaudio

1 product

Libcaudio

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libcaudio Libcaudio	Version 0.99.12p2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (28)

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html

Source: cve@mitre.org

http://secunia.com/advisories/32678

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34353

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200903-31.xml

Source: cve@mitre.org

http://sourceforge.net/tracker/index.php?func=detail&aid=1288043&group_id=27134&atid=389442

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1665

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:233

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/11/05/1

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/11/07/1

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/11/11/4

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/11/11/6

Source: cve@mitre.org

http://www.securityfocus.com/bid/32122

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3132

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46392

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html