PatchTheCVEmini-stream vulnerabilities
Recent CVEs affecting mini-stream products. 2 tracked.
mini-stream has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-01-02. Highest priority: CVE-2014-9448 (score 55/100).
- CVE-2014-9448 HIGH 7.5 DOWNGRADE Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrar
- CVE-2009-5137 HIGH 7.5 DOWNGRADE Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary cod
FAQ
How do I fix mini-stream vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mini-stream being exploited right now?
None of the tracked mini-stream CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mini-stream CVE should I patch first?
CVE-2014-9448 currently ranks highest (55/100): Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrar.