CVE-2008-4631

Current Description

Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information.

Basic Data

PublishedOctober 21, 2008
Last ModifiedAugust 08, 2017
Assignercve@mitre.org
Data TypeCVE
Data FormatMITRE
Data Version4.0
Problem TypeCWE-119
CVE Data Version4.0

Base Metric V2

CVSS 2 - Version2.0
CVSS 2 - Vector StringAV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 2 - Access VectorNETWORK
CVSS 2 - Access ComplexityLOW
CVSS 2 - AuthenticationNONE
CVSS 2 - Confidentiality ImpactCOMPLETE
CVSS 2 - Availability ImpactCOMPLETE
CVSS 2 - Base Score10.0
SeverityHIGH
Exploitability Score10.0
Impact Score10.0
Obtain All Privilegefalse
Obtain User Privilegefalse
Obtain Other Privilegefalse

Base Metric V3

No data provided.

Configurations

  • OR - Configuration 1
    Cpe VersionPartVendorProductVersionUpdateEditionLanguageSW EditionTarget SWTarget HWOtherVersion Start IncludingVersion End IncludingVersion Start ExcludingVersion End Excluding
    2.3ApplicationMyer Sound LaboratoriesMuscle1.00*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.01*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.10*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.20*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.21*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.22*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.23*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.24*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.30*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.31*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.40*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.41*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.42*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.43*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.44*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.45*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.50*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.51*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.60*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.61*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.62*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.63*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.64*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.70*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.71*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.72*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.80*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.82*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.83*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.84*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.90*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.91*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.92*******
    2.3ApplicationMyer Sound LaboratoriesMuscle1.93*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.00*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.10*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.11*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.12*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.13*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.14*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.15*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.16*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.17*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.18*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.19*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.20*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.21*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.23*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.24*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.25*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.30*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.31*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.43*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.44*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.45*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.46*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.47*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.48*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.49*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.50*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.51*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.52*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.60*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.61*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.62*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.63*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.64*******
    2.3ApplicationMyer Sound LaboratoriesMuscle2.65*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.00*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.01*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.02*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.03*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.10*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.11*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.20*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.21*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.22*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.23*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.24*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.30*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.31*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.32*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.33*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.34*******
    2.3ApplicationMyer Sound LaboratoriesMuscle3.40*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.00*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.10*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.11*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.20*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.21*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.22*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.23*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.24*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.25*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.26*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.27*******
    2.3ApplicationMyer Sound LaboratoriesMuscle4.28*******
    2.3ApplicationMyer Sound LaboratoriesMuscle********4.30

Vulnerable Software List

VendorProductVersions
Myer Sound Laboratories Muscle *, 1.00, 1.01, 1.10, 1.20, 1.21, 1.22, 1.23, 1.24, 1.30, 1.31, 1.40, 1.41, 1.42, 1.43, 1.44, 1.45, 1.50, 1.51, 1.60, 1.61, 1.62, 1.63, 1.64, 1.70, 1.71, 1.72, 1.80, 1.82, 1.83, 1.84, 1.90, 1.91, 1.92, 1.93, 2.00, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18, 2.19, 2.20, 2.21, 2.23, 2.24, 2.25, 2.30, 2.31, 2.43, 2.44, 2.45, 2.46, 2.47, 2.48, 2.49, 2.50, 2.51, 2.52, 2.60, 2.61, 2.62, 2.63, 2.64, 2.65, 3.00, 3.01, 3.02, 3.03, 3.10, 3.11, 3.20, 3.21, 3.22, 3.23, 3.24, 3.30, 3.31, 3.32, 3.33, 3.34, 3.40, 4.00, 4.10, 4.11, 4.20, 4.21, 4.22, 4.23, 4.24, 4.25, 4.26, 4.27, 4.28

References

NameSourceURLTags
32318http://secunia.com/advisories/32318SECUNIAVendor Advisory
31822http://www.securityfocus.com/bid/31822BID
ADV-2008-2869http://www.vupen.com/english/advisories/2008/2869VUPEN
muscle-messageaddtostring-bo(45959)https://exchange.xforce.ibmcloud.com/vulnerabilities/45959XF
https://public.msli.com/lcs/muscle/muscle/HISTORY.txthttps://public.msli.com/lcs/muscle/muscle/HISTORY.txtCONFIRM