Approved changes feed: RSS · Atom

cpe:2.3:a:cowon_america:jetaudio:7.0.3_basic:*:*:*:*:*:*:*

part: a version: 7.0.3_basic update: *

VendorCowon America (a96e8efd-371a-5897-a8d7-5d6360825691)
ProductJetaudio (1bc62f84-5fbc-5fc0-b014-218b0cedc178)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5487 vulnerable 2026-06-08 04:50:06.201773 Details available
Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a long URL in an EXTM3U section of a .m3u file.
Published: 2007-10-16T23:00:00.000Z
Updated: 2024-08-07T15:31:58.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4983 vulnerable 2026-06-08 04:49:57.580199 Details available
Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ (dot dot backslash) in the second argument to the DownloadFromMusicStore method. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for code execution by overwriting JetAudio.exe, which is launched by the control after completion of the method call.
Published: 2007-09-19T19:00:00.000Z
Updated: 2024-08-07T15:17:27.810Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.