Approved changes feed: RSS · Atom

cpe:2.3:a:cowon_america:jetaudio:7.0.3.3016:*:*:*:*:*:*:*

part: a version: 7.0.3.3016 update: *

VendorCowon America (a96e8efd-371a-5897-a8d7-5d6360825691)
ProductJetaudio (1bc62f84-5fbc-5fc0-b014-218b0cedc178)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4983 vulnerable 2026-06-08 04:49:57.579654 Details available
Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ (dot dot backslash) in the second argument to the DownloadFromMusicStore method. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for code execution by overwriting JetAudio.exe, which is launched by the control after completion of the method call.
Published: 2007-09-19T19:00:00.000Z
Updated: 2024-08-07T15:17:27.810Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.