CVE-2008-2363
02.06.2008, 21:30
The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| pan | pan | 𝑥 ≤ 0.132 |
| pan | pan | 0.105 |
| pan | pan | 0.106 |
| pan | pan | 0.107 |
| pan | pan | 0.108 |
| pan | pan | 0.109 |
| pan | pan | 0.110 |
| pan | pan | 0.111 |
| pan | pan | 0.112 |
| pan | pan | 0.113 |
| pan | pan | 0.114 |
| pan | pan | 0.115 |
| pan | pan | 0.116 |
| pan | pan | 0.117 |
| pan | pan | 0.118 |
| pan | pan | 0.119 |
| pan | pan | 0.120 |
| pan | pan | 0.121 |
| pan | pan | 0.122 |
| pan | pan | 0.123 |
| pan | pan | 0.124 |
| pan | pan | 0.125 |
| pan | pan | 0.126 |
| pan | pan | 0.127 |
| pan | pan | 0.128 |
| pan | pan | 0.129 |
| pan | pan | 0.130 |
| pan | pan | 0.131 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References