CVE-2009-1566

Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/36069	Vendor Advisory
http://www.securityfocus.com/bid/37183
http://secunia.com/secunia_research/2009-38/	Vendor Advisory
http://www.vupen.com/english/advisories/2009/3375
https://exchange.xforce.ibmcloud.com/vulnerabilities/54496
http://www.securityfocus.com/archive/1/508165/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:roxio:easy_media_creator:9.0.136:::::::*
	cpe:2.3:a:roxio:creator::::::::

Information

Published : 2009-12-03 10:30

Updated : 2018-10-10 12:37

NVD link : CVE-2009-1566

Mitre link : CVE-2009-1566

JSON object : View

CWE

CWE-189

Numeric Errors

Advertisement

Products Affected

roxio

creator
easy_media_creator

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/36069", "name": "36069", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/37183", "name": "37183", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/secunia_research/2009-38/", "name": "http://secunia.com/secunia_research/2009-38/", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.vupen.com/english/advisories/2009/3375", "name": "ADV-2009-3375", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54496", "name": "roxio-image-code-execution(54496)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/508165/100/0/threaded", "name": "20091202 Secunia Research: Roxio Creator Image Rendering Integer Overflow Vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-189"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2009-1566", "ASSIGNER": "PSIRT-CNA@flexerasoftware.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2009-12-03T18:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:roxio:easy_media_creator:9.0.136:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:roxio:creator:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "9.0.136"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-10T19:37Z"}