$ cve CVE-2006-1148 JSON

CVE-2006-1148 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 73% (pctl 99)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	73.03% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2006-03-10
Last modified	2026-06-16

Affected (1)

Vendor	Product
peercast	peercast

Public exploits

Source	Title	Date
exploit-db	PeerCast 0.1216 (Windows x86) - URL Handling Buffer Overflow (Metasploit)	2010-09-20
exploit-db	PeerCast 0.1216 (Linux) - URL Handling Buffer Overflow (Metasploit)	2010-09-20
exploit-db	PeerCast 0.1216 - Remote Stack Overflow (Metasploit)	2006-03-08

References

→ the Explorer · watch your stack · NVD