CVE-2008-5030 in Libcaudio

Summary

Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 11/10/2008
• Disclosure: 11/10/2008
• Moderation: VulDB entry created
• Entries: VDB-44963 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 10.0
• EPSS: 0.04982
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-5030
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-5030
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-5030/