Detections
Analytics
MusicMatch < 9.0.5066 / 10.0.2048 Multiple Vulnerabilities
medium Nessus Plugin ID 18049
Synopsis
The remote host is running a media player that is affected by multiple vulnerabilities.Description
The remote host is running MusicMatch, a music player.The remote version of this software is affected by a buffer overflow vulnerability as well as a cross-site scripting vulnerability.
An attacker may exploit these flaws to execute arbitrary code on the remote host.
Solution
Upgrade to MusicMatch 9.0.5066 or 10.0.2048.See Also
http://www.musicmatch.com/info/user_guide/faq/security_updates.htm
Plugin Details
Severity: Medium
ID: 18049
File Name: musicmatch_multiple_vulnerabilities.nasl
Version: 1.20
Type: local
Agent: windows
Family: Windows
Published: 4/14/2005
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 4/14/2005
Reference Information
CVE: CVE-2005-1168, CVE-2005-1185