Detections
Analytics
Roxio Creator 9.x <= 9.0.136 Image Handling Integer Overflow
high Nessus Plugin ID 70144
Language:
Synopsis
The remote Windows host has an application that is affected by an integer overflow vulnerability.Description
According to its version, the Roxio Creator install on the remote host is 9.x earlier than or equal to 9.0.136. It is, therefore, affected by an integer overflow vulnerability related to image handling that could allow arbitrary code execution.Solution
Upgrade to Roxio Creator 2010 SP1 or later.See Also
Plugin Details
Severity: High
ID: 70144
File Name: roxio_creator_img_overflow.nasl
Version: 1.6
Type: local
Agent: windows
Family: Windows
Published: 9/26/2013
Updated: 8/5/2020
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2009-1566
Vulnerability Information
CPE: cpe:/a:roxio:creator, cpe:/a:roxio:easy_media_creator
Required KB Items: SMB/Registry/Enumerated, SMB/roxio_creator/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 10/26/2009
Vulnerability Publication Date: 12/2/2009
Reference Information
CVE: CVE-2009-1566
BID: 37183