Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c
Published Aug 17, 2006
7.5
HIGHCVSS 2.0
EPSS 14.72%
Description
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.
Affected products
No data.
- ≤ 2.1.2
- ≤ 8406
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
AV:N/AC:L/Au:N/C:P/I:P/A:P
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (16 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 14.72% (0.14718) | 96.58th | v5 (v2026.06.15) |
| Sep 14, 2026 | 14.72% (0.14718) | 96.47th | v5 (v2026.06.15) |
| Jun 15, 2026 | 13.64% (0.13640) | 95.98th | v5 (v2026.06.15) |
| Aug 26, 2025 | 34.87% (0.34865) | 96.88th | v4 (v2025.03.14) |
| Jul 20, 2025 | 27.11% (0.27106) | 96.15th | v4 (v2025.03.14) |
| Mar 30, 2025 | 25.88% (0.25878) | 95.81th | v4 (v2025.03.14) |
| Mar 29, 2025 | 28.76% (0.28762) | 94.52th | v4 (v2025.03.14) |
| Mar 17, 2025 | 25.88% (0.25878) | 95.81th | v4 (v2025.03.14) |
| Dec 17, 2024 | 31.19% (0.31186) | 96.99th | v3 (v2023.03.01) |
| Dec 6, 2024 | 24.21% (0.24208) | 96.78th | v3 (v2023.03.01) |
| Nov 21, 2023 | 21.38% (0.21378) | 95.94th | v3 (v2023.03.01) |
| May 14, 2023 | 16.30% (0.16298) | 95.19th | v3 (v2023.03.01) |
| Apr 6, 2023 | 16.53% (0.16526) | 95.15th | v3 (v2023.03.01) |
| Mar 7, 2023 | 16.83% (0.16831) | 95.15th | v3 (v2023.03.01) |
| Mar 6, 2023 | 42.28% (0.42280) | 98.28th | v2 (v2022.01.01) |
| Feb 4, 2022 | 42.28% (0.42280) | 97.59th | v2 (v2022.01.01) |
No CWE recorded.
References (21)
- http://aluigi.altervista.org/adv/brainzbof-adv.txt x_refsource_MISC
- http://secunia.com/advisories/21404 third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
- http://secunia.com/advisories/21668 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/21699 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/22191 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/22393 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/22517 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/22639 third-party-advisoryx_refsource_SECUNIA
- http://security.gentoo.org/glsa/glsa-200610-09.xml vendor-advisoryx_refsource_GENTOO
- http://securityreason.com/securityalert/1399 third-party-advisoryx_refsource_SREASON
- http://securitytracker.com/id?1016691 vdb-entryx_refsource_SECTRACKExploit
- http://www.debian.org/security/2006/dsa-1162 vendor-advisoryx_refsource_DEBIAN
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:157 vendor-advisoryx_refsource_MANDRIVA
- http://www.novell.com/linux/security/advisories/2006_25_sr.html vendor-advisoryx_refsource_SUSE
- http://www.securityfocus.com/archive/1/443205/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/444843/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/19508 vdb-entryx_refsource_BIDExploit
- http://www.ubuntu.com/usn/usn-363-1 vendor-advisoryx_refsource_UBUNTU
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28367 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28368 vdb-entryx_refsource_XF
- https://issues.rpath.com/browse/RPL-610 x_refsource_CONFIRM
Change history (0)
No recorded changes yet.