PublicDate: 2006-07-18 15:37:00 UTC Candidate: CVE-2006-3600 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3600 Description: Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers to cause a denial of service (application crash) and possibly execute code via a long (1) Album release date (MBE_ReleaseGetDate), (2) data, or (3) error strings. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_libtunepimp: released (0.3.0-9.1ubuntu3.1) edgy_libtunepimp: released (0.4.2-3ubuntu3) feisty_libtunepimp: released (0.4.2-3ubuntu3) devel_libtunepimp: released (0.4.2-3ubuntu3) upstream_libtunepimp: needs-triage