Libtunepimp Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	18961
Class:	Boundary Condition Error
CVE:	CVE-2006-3600
Remote:	Yes
Local:	No
Published:	Jul 13 2006 12:00AM
Updated:	Aug 02 2006 09:31PM
Credit:	Discovery is credited to [email protected].
Vulnerable:	Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 libtunepimp libtunepimp 0.4.2 libtunepimp libtunepimp 0.3 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:

Libtunepimp Multiple Remote Buffer Overflow Vulnerabilities

The libtunepimp library is affected by multiple remote buffer-overflow vulnerabilities.
These issues arise when the library handles malicious audio files.

A remote attacker may execute arbitrary code to gain unauthorized access.

Versions 0.4.2 and prior are vulnerable to these issues.

Libtunepimp Multiple Remote Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Libtunepimp Multiple Remote Buffer Overflow Vulnerabilities

Solution:
Please see the references for more information and vendor advisories.

Libtunepimp Multiple Remote Buffer Overflow Vulnerabilities

References:

• libtunepimp 0.4.2 buffer overflow ([email protected])
  
• TunePimp Library (MusicBrainz)