critical9.3Public exploit code
CVE-2008-0747
Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .as…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- jetAudio 8.0.0.0 - '.asx' Basic Local Crash (PoC)2009-12-25 · dos · windows · Verified
- jetAudio 7.0.5 - '.asx' Remote Stack Overflow (PoC)2008-02-08 · dos · windows · Verified
Impact
Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file, a different vulnerability than CVE-2007-5487.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cowon America | Jetaudio Basic | through 7.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28855
- http://securityreason.com/securityalert/3642
- http://www.securityfocus.com/archive/1/487806/100/0/threaded
- http://www.securityfocus.com/bid/27698
- http://www.vupen.com/english/advisories/2008/0502
- https://www.exploit-db.com/exploits/5085
- http://secunia.com/advisories/28855
- http://securityreason.com/securityalert/3642
- http://www.securityfocus.com/archive/1/487806/100/0/threaded
- http://www.securityfocus.com/bid/27698
- http://www.vupen.com/english/advisories/2008/0502
- https://www.exploit-db.com/exploits/5085