CVE-2005-4648 (CNNVD-200512-995)
中文标题:
Illustrate dBpowerAMP Music Converter 缓冲区溢出漏洞
英文标题:
Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) Mu...
漏洞描述
中文描述:
Illustrate dBpowerAMP Music Converter 11.5及更早版本，可能含(1)MusicConverter.exe，(2)playlist.exe和(3)amp.exe，存在缓冲区溢出，用户协助式攻击者可以通过带有长条目的.m3u播放列表，可能涉及大字段名，发起拒绝服务攻击或执行任意代码，如SecuBox.Labs.m3u。
英文描述:
Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe, allows user-assisted attackers to cause a denial of service or execute arbitrary code via a .m3u playlist with a long entry, possibly involving large field names, as demonstrated by SecuBox.Labs.m3u. NOTE: this issue might be the same as the .m3u vulnerability in CVE-2004-1569, but if so, then CD:SF-LOC suggests creating a different identifier since the .m3u issue would affect different versions than the .pls issue.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| illustrate | dbpoweramp_music_converter | * | - | - |
cpe:2.3:a:illustrate:dbpoweramp_music_converter:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
AV:N/AC:H/Au:N/C:P/I:P/A:P
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2005-4648 |
2025-11-11 15:17:38 | 2025-11-11 07:32:30 |
| NVD | nvd_CVE-2005-4648 |
2025-11-11 14:51:21 | 2025-11-11 07:41:16 |
| CNNVD | cnnvd_CNNVD-200512-995 |
2025-11-11 15:08:49 | 2025-11-11 07:49:03 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-200512-995
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 5.1
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:H/Au:N/C:P/I:P/A:P
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 1
- data_sources: ['cve'] -> ['cve', 'nvd']