CVE-2006-4197
- State
- Published
- Severity
- Not scored
- Published
- Aug 17, 2006
- Updated
- Aug 7, 2024
- Reserved
- Aug 17, 2006
Description
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-1162vendor-advisory
- 22393third-party-advisory
- 22191third-party-advisory
- libmusicbrainz-mbhttpdownload-bo(28367)vdb-entry
- 22639third-party-advisory
- 21404third-party-advisory
- https://issues.rpath.com/browse/RPL-610
- USN-363-1vendor-advisory
- 19508vdb-entry
- GLSA-200610-09vendor-advisory
- 22517third-party-advisory
- SUSE-SR:2006:025vendor-advisory
- http://aluigi.altervista.org/adv/brainzbof-adv.txt
- 21699third-party-advisory
- 20060830 rPSA-2006-0161-1 libmusicbrainzmailing-list
- libmusicbrainz-rdfparse-bo(28368)vdb-entry
- 21668third-party-advisory
- 20060813 Multiple buffer-overflows in libmusicbrainz 2.1.2mailing-list
- 1016691vdb-entry
- MDKSA-2006:157vendor-advisory
- 1399third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.