CVE-2006-1148: Peercast

High severity, CVSS 7.5. EPSS: 73% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.

Affected products

• Peercast Peercast: up to and including 0.1215; version 0.1211 only; version 0.1212 only

Published 2006-03-10. Last modified 2026-06-16.