critical10.0Public exploit code
CVE-2008-0550
Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HT…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Streamcast 0.9.75 - HTTP User-Agent Buffer Overflow (Metasploit)2010-06-11 · remote · windows · Verified
Impact
Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Radio Toolbox | Steamcast | through 0.9.75 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/steamcazz-adv.txt
- http://aluigi.org/poc/steamcazz.zip
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39928
- http://aluigi.altervista.org/adv/steamcazz-adv.txt
- http://aluigi.org/poc/steamcazz.zip
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39928