« Volver al listado

CVE-2006-6547

Estado: ModificadaMedia (4.3)—

Buffer overflow in the readAA function in read_aa.cpp in Winamp iPod Plugin (ml_ipod) 2.00 p19 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long tag in an audible.com audiobook (aa) file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Mlipod — Winamp Ipod Plugin

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6547",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-12-14T18:28:00.000",
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/mlipodbof-adv.txt",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://mlipod.cvs.sourceforge.net/mlipod/ml_ipod/read_aa.cpp",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://mlipod.cvs.sourceforge.net/mlipod/ml_ipod/read_aa.cpp?r1=1.3.6.1&r2=1.3.6.2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23354",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/32266",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21569",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4986",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30866",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.altervista.org/adv/mlipodbof-adv.txt",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://mlipod.cvs.sourceforge.net/mlipod/ml_ipod/read_aa.cpp",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://mlipod.cvs.sourceforge.net/mlipod/ml_ipod/read_aa.cpp?r1=1.3.6.1&r2=1.3.6.2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23354",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/32266",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21569",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4986",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30866",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the readAA function in read_aa.cpp in Winamp iPod Plugin (ml_ipod) 2.00 p19 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long tag in an audible.com audiobook (aa) file."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en la función readAA  en read_aa.cpp en Winamp iPod Plugin (ml_ipod) 2.00 p19 y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o ejecutar código de su elección mediante una etiqueta larga en un fichero audiolibro (aa) audible.com ."
    }
  ],
  "lastModified": "2026-06-16T22:33:21.023",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mlipod:winamp_ipod_plugin:2.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A745D034-FCDB-41DE-8D4A-05A6F615BC64"
            },
            {
              "criteria": "cpe:2.3:a:mlipod:winamp_ipod_plugin:2.00_p19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5F3F035-22A0-4701-A2CE-F97E15E26507"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}