COWON America JetAudio Audio File ID Tag Remote Buffer Overflow Vulnerability

Bugtraq ID:	18825
Class:	Boundary Condition Error
CVE:	CVE-2006-2910
Remote:	Yes
Local:	No
Published:	Jul 05 2006 12:00AM
Updated:	Jul 05 2006 08:39PM
Credit:	Tan Chew Keong discovered this issue.
Vulnerable:	COWON America jetAudio Basic 6.2.6.8330
Not Vulnerable:

COWON America JetAudio Audio File ID Tag Remote Buffer Overflow Vulnerability

jetAudio is prone to a remote buffer-overflow vulnerability.

The vulnerability presents itself when the application handles a malicious audio file.

A successful exploit may allow an attacker to gain unauthorized remote access in the context of an affected user.

jetAudio version 6.2.6.8330 Basic is reported vulnerable. Other versions may be affected as well.

COWON America JetAudio Audio File ID Tag Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

COWON America JetAudio Audio File ID Tag Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

COWON America JetAudio Audio File ID Tag Remote Buffer Overflow Vulnerability

References:

• jetAudio ID Tag Handling Buffer Overflow Vulnerability (Secunia)
  
• jetAudio Product Page (COWON America)