CVE		CVE-2008-4829
Status		Candidate
Description		Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long "Zwitterion v" HTTP header, related to the http_parse_sc_header function; (2) a crafted pls playlist with a long entry, related to the http_get_pls function; or (3) a crafted m3u playlist with a long File entry, related to the http_get_m3u function.
Phase		Assigned (31.10.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4829
References		BID : 32356
		BUGTRAQ : 20081119 Secunia Research: Streamripper Multiple Buffer Overflows
		DEBIAN : DSA-1683
		MISC : http://secunia.com/secunia_research/2008-50/
		OSVDB : 49997
		SECUNIA : 32562
		SECUNIA : 33052
		SECUNIA : 33061
		SREASON : 4647
		VUPEN : ADV-2008-3207
SecurityVulns:		Streamripper multiple buffer overflows