Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data.

A heap overflow was found in the CDDB retrieval code of libcdaudio, which could result in the execution of arbitrary code (CVE-2008-5030).

In addition, the fixes for CVE-2005-0706 were not applied to newer libcdaudio packages as shipped with Mandriva Linux, so the patch to fix that issue has been applied to 2008.1 and 2009.0 (this was originally fixed in MDKSA-2005:075). This issue is a buffer overflow flaw found by Joseph VanAndel. Corporate 3.0 has this fix already applied.

The updated packages have been patched to prevent these issues.

The remote host is affected by the vulnerability described in GLSA-200903-31 (libcdaudio: User-assisted execution of arbitrary code)

    A heap-based buffer overflow has been reported in the     cddb_read_disc_data() function in cddb.c when processing overly long     CDDB data.
  Impact :

    A remote attacker could entice a user to connect to a malicious CDDB     server, possibly resulting in the remote execution of arbitrary code     with the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

securityfocus reports :

The 'libcdaudio' library is prone to a remote heap code in the context of an application that uses the library. Failed attacks will cause denial-of-service conditions.

A buffer-overflow in Grip occurs when the software processes a response to a CDDB query that has more than 16 matches.

To exploit this issue, an attacker must be able to influence the response to a CDDB query, either by controlling a malicious CDDB server or through some other means. Successful exploits will allow arbitrary code to run.

It was discovered that a heap overflow in the CDDB retrieval code of libcdaudio, a library for controlling a CD-ROM when playing audio CDs, may result in the execution of arbitrary code.

ID	Name	Product	Family	Severity
36292	Mandriva Linux Security Advisory : libcdaudio (MDVSA-2008:233-1)	Nessus	Mandriva Local Security Checks	critical
35954	GLSA-200903-31 : libcdaudio: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	critical
35343	FreeBSD : libcdaudio -- remote buffer overflow and code execution (bd730827-dfe0-11dd-a765-0030843d3802)	Nessus	FreeBSD Local Security Checks	critical
34757	Debian DSA-1665-1 : libcdaudio - heap overflow	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2008-5030

critical

Tenable Plugins

critical

critical

critical

critical