CVE-2005-4194

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cause a denial of service (application crash) via a long query string.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17998Exploit, Vendor Advisory
http://www.ipomonis.com/advisories/sws.txtExploit, Vendor Advisory
http://www.securityfocus.com/bid/15809Exploit
http://www.vupen.com/english/advisories/2005/2841
http://secunia.com/advisories/17998Exploit, Vendor Advisory
http://www.ipomonis.com/advisories/sws.txtExploit, Vendor Advisory
http://www.securityfocus.com/bid/15809Exploit
http://www.vupen.com/english/advisories/2005/2841

Timeline

Published: Dec 13, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-41957.5Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute arbitrary SQL comma CVE-2005-41964.3Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to inject arbitra CVE-2005-41977.5tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is exec CVE-2005-41987.5SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE CVE-2005-41997.5Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary SQL commands via the CVE-2005-420010.0Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnera CVE-2005-42015.0Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via ".../" (triple dot) sequences CVE-2005-42025.0Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2)CVE-2005-42037.8LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by s CVE-2005-42044.3Cross-site scripting (XSS) vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript via the msg command. NO CVE-2005-42054.3Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inject arbitrary web scr CVE-2005-42066.1Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers t