ID de Prueba:	1.3.6.1.4.1.25623.1.0.900625
Categoría:	Buffer overflow
Título:	Mini-Stream Multiple Products Buffer Overflow Vulnerability
Resumen:	Mini-Stream products are prone to a buffer overflow vulnerability.
Descripción:	Summary: Mini-Stream products are prone to a buffer overflow vulnerability. Vulnerability Insight: A boundary error occurs in multiple Mini-stream products due to inadequate validation of user supplied data while processing playlist (.m3u) files with overly long URI. Vulnerability Impact: Successful exploitation allows attackers to execute arbitrary code or crash the system. Affected Software/OS: Shadow Stream Recorder version 3.0.1.7 and prior on Windows RM-MP3 Converter version 3.0.0.7 and prior on Windows WM Downloader version 3.0.0.9 and prior on Windows RM Downloader version 3.0.0.9 and prior on Windows ASXtoMP3 Converter version 3.0.0.7 and prior on Windows Ripper version 3.0.1.1 and prior on Windows Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1329 BugTraq ID: 34494 http://www.securityfocus.com/bid/34494 https://www.exploit-db.com/exploits/8405/ https://www.exploit-db.com/exploits/8426 http://secunia.com/advisories/34719 Common Vulnerability Exposure (CVE) ID: CVE-2009-1328 https://www.exploit-db.com/exploits/8405 https://www.exploit-db.com/exploits/8413 http://secunia.com/advisories/34653 XForce ISS Database: rmmp3-m3u-bo(49841) https://exchange.xforce.ibmcloud.com/vulnerabilities/49841 Common Vulnerability Exposure (CVE) ID: CVE-2009-1327 https://www.exploit-db.com/exploits/8403 https://www.exploit-db.com/exploits/8411 http://secunia.com/advisories/34674 XForce ISS Database: wmdownloader-m3u-bo(49842) https://exchange.xforce.ibmcloud.com/vulnerabilities/49842 Common Vulnerability Exposure (CVE) ID: CVE-2009-1326 https://www.exploit-db.com/exploits/8404 https://www.exploit-db.com/exploits/8410 http://secunia.com/advisories/34647 XForce ISS Database: rmdownloader-m3u-bo(49843) https://exchange.xforce.ibmcloud.com/vulnerabilities/49843 Common Vulnerability Exposure (CVE) ID: CVE-2009-1324 https://www.exploit-db.com/exploits/8407 https://www.exploit-db.com/exploits/8412 http://secunia.com/advisories/34681 XForce ISS Database: asxmp3-m3u-bo(49840) https://exchange.xforce.ibmcloud.com/vulnerabilities/49840 Common Vulnerability Exposure (CVE) ID: CVE-2009-1325 https://www.exploit-db.com/exploits/8402 https://www.exploit-db.com/exploits/8416 http://secunia.com/advisories/34692 XForce ISS Database: ripper-m3u-bo(49844) https://exchange.xforce.ibmcloud.com/vulnerabilities/49844
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.