CVE-2006-6547

Buffer overflow in the readAA function in read_aa.cpp in Winamp iPod Plugin (ml_ipod) 2.00 p19 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long tag in an audible.com audiobook (aa) file.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2006-12-14

Last modified

2024-08-07

Affected products

• Winamp Ipod Plugin (Mlipod)

References

• http://aluigi.altervista.org/adv/mlipodbof-adv.txt
• http://mlipod.cvs.sourceforge.net/mlipod/ml_ipod/read_aa.cpp
• http://mlipod.cvs.sourceforge.net/mlipod/ml_ipod/read_aa.cpp?r1=1.3.6.1&r2=1.3.6.2
• http://secunia.com/advisories/23354
• http://www.osvdb.org/32266
• http://www.securityfocus.com/bid/21569
• http://www.vupen.com/english/advisories/2006/4986
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30866