Buffer Overflow Vulnerability in jetAudio by COWON
CVE-2006-2910

Currently unrated

Key Information:

Vendor: Cowon America
Status: Jetaudio
Vendor: CVE Published:; 5 July 2006

🔔 Create Cowon America Vulnerability Alert

What is CVE-2006-2910?

A buffer overflow vulnerability exists in jetAudio versions 6.2.6.8330 and possibly other iterations. This vulnerability can be exploited by attackers leveraging specially crafted audio files (e.g., WMA format) that contain excessively long ID Tag values for Title, Author, or Album. This flawed handling of data can lead to arbitrary code execution, especially when the sound card driver is either disabled or improperly installed, increasing the risk of malicious activities.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27593

vdb-entryx_refsource_XF

http://secunia.com/advisories/19456

third-party-advisoryx_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/2667

vdb-entryx_refsource_VUPEN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 5, 2006
Vulnerability Reserved
Jun 8, 2006

CVE-2006-2910 Data

JSON