Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in...

10 CVSS

Vulnerability Description

Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4631

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

myer sound laboratories

View all reports →

Affected Software

muscle

Vulnerable Versions:

0, 1.00, 1.01, 1.10, 1.20, 1.21, 1.22, 1.23, 1.24, 1.30, 1.31, 1.40, 1.41, 1.42, 1.43, 1.44, 1.45, 1.50, 1.51, 1.60, 1.61, 1.62, 1.63, 1.64, 1.70, 1.71, 1.72, 1.80, 1.82, 1.83, 1.84, 1.90, 1.91, 1.92, 1.93, 2.00, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18, 2.19, 2.20, 2.21, 2.23, 2.24, 2.25, 2.30, 2.31, 2.43, 2.44, 2.45, 2.46, 2.47, 2.48, 2.49, 2.50, 2.51, 2.52, 2.60, 2.61, 2.62, 2.63, 2.64, 2.65, 3.00, 3.01, 3.02, 3.03, 3.10, 3.11, 3.20, 3.21, 3.22, 3.23, 3.24, 3.30, 3.31, 3.32, 3.33, 3.34, 3.40, 4.00, 4.10, 4.11, 4.20, 4.21, 4.22, 4.23, 4.24, 4.25, 4.26, 4.27, 4.28

Timeline

Official Publish: October 21st, 2008

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.