CVE-2006-4046

{"id": "CVE-2006-4046", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-08-09T23:04:00.000", "references": [{"url": "http://aluigi.altervista.org/adv/ocpbof-adv.txt", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/21267", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/1349", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016611", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/441730/100/100/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19262", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/3078", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28103", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28104", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28105", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28106", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/2094", "source": "cve@mitre.org"}, {"url": "http://aluigi.altervista.org/adv/ocpbof-adv.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/21267", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityreason.com/securityalert/1349", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1016611", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/441730/100/100/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/19262", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/3078", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28103", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28104", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28105", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28106", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/2094", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD, allow remote attackers to execute arbitrary code via (1) a large .S3M file handled by the mpLoadS3M function, (2) a crafted .IT file handled by the itplayerclass::module::load function, (3) a crafted .ULT file handled by the mpLoadULT function, or (4) a crafted .AMS file handled by the mpLoadAMS function."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer basado en pila en Open Cubic Player 2.6.0pre6 y versiones anteriores para Windows y 0.1.10_rc5 y versiones anteriores para Linux/BSD, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante (1) un fichero grande .S3M manejado por la funci\u00f3n mpLoadS3M, (2) un fichero manipulado .IT manejado por la funci\u00f3n itplayerclass::module::load, (3) un fichero manipulado .ULT manejado por la funci\u00f3n mpLoadULT, \u00f3 (4) un fichero manipulado .AMS manejado por la funci\u00f3n mpLoadAMS."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:open_cubic_player:open_cubic_player:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10D6EDA7-2CD4-489D-9978-0FD631625AB2", "versionEndIncluding": "0.1.10_rc5"}, {"criteria": "cpe:2.3:a:open_cubic_player:open_cubic_player:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D87721E-D113-45CD-B36D-B871C1982637", "versionEndIncluding": "2.60_pre6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}