CVE-2006-4235

{"id": "CVE-2006-4235", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-08-21T18:04:00.000", "references": [{"url": "http://kb.sony-europe.com/KB/Solutions/EN/V00000_V00499/v00244.html", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/21510", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/697761", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/27966", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.pentest.co.uk/documents/ptl-2006-01.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19558", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/3286", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28421", "source": "cve@mitre.org"}, {"url": "http://kb.sony-europe.com/KB/Solutions/EN/V00000_V00499/v00244.html", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/21510", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/697761", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/27966", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.pentest.co.uk/documents/ptl-2006-01.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/19558", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2006/3286", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28421", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en la funcionalidad de importaci\u00f3n de proyecto en Sony SonicStage Mastering Studio 1.1.00 hasta 2.2.01 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un archivo SMP manipulado."}], "lastModified": "2024-11-21T00:15:27.520", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.1.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "007BA588-541F-4233-A494-D8FE6B438468"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.2.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DE05DDE-67B9-4541-950A-05DA15D05A5A"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.2.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64BCF040-A950-4AAB-AC97-657A48DAD37E"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.2.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E013F834-5952-4AF8-AA04-2D1138E237BA"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.3.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5016C921-01E0-4C31-ADCC-5CB92D2E3263"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.4.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EE9B73D-C4E7-4CFD-AD91-18459C095C65"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.4.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7982EB9-2CBE-4C2E-8A8D-C4E4C04717C6"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.4.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75348F71-D7D6-4CD5-B28E-AD7B4F18E559"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:1.4.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "474FB5AE-E699-48DA-A8F7-1FF7353946C6"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:2.0.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B31B130-88B3-4654-9A51-6C7B0A273C7E"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:2.1.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23FE1FCF-47ED-4E6A-8B59-B00748B17441"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:2.1.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "856D8D4D-D016-4E98-8C34-AE8AF94C3AFF"}, {"criteria": "cpe:2.3:a:sony:sonicstage_mastering_studio:2.2.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6EE9FE0-F3E2-4F35-B3AB-E681B96C41AF"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "This vulnerability is addressed in the following product releases:\r\nSony, SonicStage Mastering Studio, 1.2.04\r\nSony, SonicStage Mastering Studio, 1.4.04\r\nSony, SonicStage Mastering Studio, 2.2.04"}