CVE-2007-3965 - Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly rela

CVE-2007-3965

Summary

Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments. The vendor has addressed this issue through an updated product release: http://sourceforge.net/projects/ufmod/

References

http://osvdb.org/38275
http://secunia.com/advisories/26111
http://sourceforge.net/project/shownotes.php?group_id=158498&release_id=523791
http://www.securityfocus.com/bid/24980

Vulnerable Configurations

cpe:2.3:a:ufmod:ufmod_xm_player_library:*:*:*:*:*:*:*:*
cpe:2.3:a:ufmod:ufmod_xm_player_library:*:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 15-11-2008 - 06:54)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	24980
misc	http://sourceforge.net/project/shownotes.php?group_id=158498&release_id=523791
osvdb	38275
secunia	26111

Last major update

15-11-2008 - 06:54

Published

25-07-2007 - 17:30

Last modified

15-11-2008 - 06:54