CVE-2006-4197
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 14%
from disclosure to weapon0 days
Published on NVDAug 17
1st PoCAug 14
exploitation probability
14%top 4% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28384⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://aluigi.altervista.org/adv/brainzbof-adv.txthttp://secunia.com/advisories/21404http://secunia.com/advisories/21668http://secunia.com/advisories/21699http://secunia.com/advisories/22191http://secunia.com/advisories/22393http://secunia.com/advisories/22517http://secunia.com/advisories/22639http://security.gentoo.org/glsa/glsa-200610-09.xmlhttp://securityreason.com/securityalert/1399http://securitytracker.com/id?1016691https://exchange.xforce.ibmcloud.com/vulnerabilities/28367