CVE-2006-2910

MEDIUM 5.1CVE-2006-2910 · Published 05/07/2006 · updated 23/09/2026

In short

CVE-2006-2910 is a MEDIUM (CVSS 5.1) vulnerability affecting jetaudio (cowon america).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jetaudio cowon_america	`= basic_6.2.6.8330`	No fix yet

Description

Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed.

References

secunia.com/advisories/19456 · Vendor Advisory
secunia.com/secunia_research/2006-45/advisory · Vendor Advisory
securityfocus.com/bid/18825
vupen.com/english/advisories/2006/2667
exchange.xforce.ibmcloud.com/vulnerabilities/27593

More vulnerabilities in jetaudio

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jetaudio

cowon_america

= basic_6.2.6.8330

No fix yet

Description

More vulnerabilities in jetaudio

See all →