Read the docs
TI-2014-02773 Aliases CVE-2014-3443GHSA-498h-8prc-vjw6

JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of…

Priority LOW 24CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file.

Why it matters now

EPSS 0.02196 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 19

CPEVersionsRoleVendor
cpe:2.3:a:jetaudio:jetaudio:*:*:*:*:*:*:*:*up to 8.1.1VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0:*:*:*:*:*:*:*8.0VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.1:*:*:*:*:*:*:*8.0.1VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.2:*:*:*:*:*:*:*8.0.2VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.4:*:*:*:*:*:*:*8.0.4VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.5:*:*:*:*:*:*:*8.0.5VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.6:*:*:*:*:*:*:*8.0.6VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.7:*:*:*:*:*:*:*8.0.7VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.7.1000:-:basic:*:*:*:*:*8.0.7.1000VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.8:*:*:*:*:*:*:*8.0.8VulnerableJetaudio
  • cpe:2.3:a:jetaudio:jetaudio:*:*:*:*:*:*:*:* Versions up to 8.1.1 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.1:*:*:*:*:*:*:* Versions 8.0.1 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.2:*:*:*:*:*:*:* Versions 8.0.2 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.4:*:*:*:*:*:*:* Versions 8.0.4 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.5:*:*:*:*:*:*:* Versions 8.0.5 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.6:*:*:*:*:*:*:* Versions 8.0.6 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.7.1000:-:basic:*:*:*:*:* Versions 8.0.7.1000 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.8:*:*:*:*:*:*:* Versions 8.0.8 Vulnerable ·Jetaudio
Show 9 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:jetaudio:jetaudio:8.0.9:*:*:*:*:*:*:*8.0.9VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.10:*:*:*:*:*:*:*8.0.10VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.11:*:*:*:*:*:*:*8.0.11VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.12:*:*:*:*:*:*:*8.0.12VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.14:*:*:*:*:*:*:*8.0.14VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.15:*:*:*:*:*:*:*8.0.15VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.16:*:*:*:*:*:*:*8.0.16VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.0.17:*:*:*:*:*:*:*8.0.17VulnerableJetaudio
cpe:2.3:a:jetaudio:jetaudio:8.1.0:*:*:*:*:*:*:*8.1.0VulnerableJetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.9:*:*:*:*:*:*:* Versions 8.0.9 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.10:*:*:*:*:*:*:* Versions 8.0.10 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.11:*:*:*:*:*:*:* Versions 8.0.11 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.12:*:*:*:*:*:*:* Versions 8.0.12 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.14:*:*:*:*:*:*:* Versions 8.0.14 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.15:*:*:*:*:*:*:* Versions 8.0.15 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.16:*:*:*:*:*:*:* Versions 8.0.16 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.0.17:*:*:*:*:*:*:* Versions 8.0.17 Vulnerable ·Jetaudio
  • cpe:2.3:a:jetaudio:jetaudio:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Jetaudio

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-3443
  2. 2026-10-03 Alias added: GHSA-498h-8prc-vjw6

References

Exploit 1

  • TI-2019-15615 jetAudio 8.1.7 Denial of Service via File Naming Buffer Overflow CVSS 4.0MEDIUM 6.8
  • TI-2013-02352 Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote… CVSS 2.0HIGH 9.3
  • TI-2010-04900 Untrusted search path vulnerability in JetAudio 8.0.7.1000 Basic allows local users to… CVSS 2.0MEDIUM 6.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences