CVE-2006-2910 — Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed

Back Back to CVE browser

MEDIUM

Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed

Published Jul 5, 2006

5.1

MEDIUM

CVSS 2.0

EPSS 2.12%

Description

Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed.

Affected products

Remediation

No remediation recorded yet.

Metrics

2.12% 0.02119

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02119

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.12% (0.02119)	81.19th	v5 (v2026.06.15)
Jun 15, 2026	2.08% (0.02080)	78.99th	v5 (v2026.06.15)
Mar 17, 2025	1.62% (0.01616)	80.53th	v4 (v2025.03.14)
Dec 12, 2024	0.70% (0.00703)	80.99th	v3 (v2023.03.01)
Mar 10, 2024	0.70% (0.00703)	79.83th	v3 (v2023.03.01)
Feb 12, 2024	0.87% (0.00870)	81.85th	v3 (v2023.03.01)
Mar 7, 2023	0.87% (0.00868)	79.85th	v3 (v2023.03.01)
Mar 6, 2023	2.92% (0.02920)	83.31th	v2 (v2022.01.01)
Apr 1, 2022	2.92% (0.02920)	81.60th	v2 (v2022.01.01)
Feb 4, 2022	2.92% (0.02920)	64.09th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (5)

http://secunia.com/advisories/19456
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2006-45/advisory/
x_refsource_MISCVendor Advisory
http://www.securityfocus.com/bid/18825
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2667
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27593
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19456		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2006-45/advisory/		x_refsource_MISCVendor Advisory
http://www.securityfocus.com/bid/18825		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2667		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27593		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner flexera

Published Jul 5, 2006

Updated Aug 7, 2024

Reserved Jun 8, 2006

Link CVE-2006-2910

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Sep 23, 2026

Link CVE-2006-2910

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-2910