CVE-2006-3600

Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers to cause a denial of service (application crash) and possibly execute code via a long (1) Album release date (MBE_ReleaseGetDate), (2) data, or (3) error strings.

Date published : 2006-07-14

http://www.securityfocus.com/bid/18961

http://www.debian.org/security/2006/dsa-1135