Lucene search

K
cve[email protected]CVE-2008-5824
HistoryJan 02, 2009 - 7:30 p.m.

CVE-2008-5824

2009-01-0219:30:01
CWE-119
web.nvd.nist.gov
32
cve-2008-5824
buffer overflow
libaudiofile
denial of service
arbitrary code execution
wav file

7.9 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.3%

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file.

Affected configurations

NVD
Node
68kaudiofileMatch0.2.6
CPENameOperatorVersion
68k:audiofile68k audiofileeq0.2.6

7.9 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.3%