high7.5Public exploit code
CVE-2005-0838
Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a lon…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Icecast 2.x - XSL Parser Multiple Vulnerabilities2005-03-18 · remote · multiple · Verified
Impact
Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a long test value in an xsl:when tag, (2) a long test value in an xsl:if tag, or (3) a long select value in an xsl:value-of tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icecast | Icecast | Version 2.20 |
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1013475
- http://www.securityfocus.com/archive/1/393705
- http://www.securityfocus.com/bid/12849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19753
- http://securitytracker.com/id?1013475
- http://www.securityfocus.com/archive/1/393705
- http://www.securityfocus.com/bid/12849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19753