CVE-2008-5030

CRITICAL 10.0CVE-2008-5030 · Published 10/11/2008 · updated 16/06/2026

In short

CVE-2008-5030 is a CRITICAL (CVSS 10.0) vulnerability affecting libcaudio (libcaudio).
Chance of exploitation in the next 30 days (EPSS): 4.9%, higher than 92.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libcaudio libcaudio	`= 0.99.12p2`	No fix yet

Description

Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data.

References

lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
secunia.com/advisories/32678 · Vendor Advisory
secunia.com/advisories/34353 · Vendor Advisory
security.gentoo.org/glsa/glsa-200903-31.xml
sourceforge.net/tracker/index.php
debian.org/security/2008/dsa-1665
mandriva.com/security/advisories
openwall.com/lists/oss-security/2008/11/05/1
openwall.com/lists/oss-security/2008/11/07/1
openwall.com/lists/oss-security/2008/11/11/4
openwall.com/lists/oss-security/2008/11/11/6
securityfocus.com/bid/32122
vupen.com/english/advisories/2008/3132 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free