Audio File Library 0.2.6 - libaudiofile 'msadpcm.c .WAV' File Processing Buffer Overflow
| Reporter | Title | Published | Views | Family All 43 |
|---|---|---|---|---|
 | Debian GNU/Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
| Debian GNU/Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
| Debian GNU/Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
| libaudiofile Code Execution | 3 Nov 201600:00 | – | bdu_fstec |
 | CVE-2008-5824 | 30 Dec 200800:00 | – | circl |
 | CVE-2008-5824 | 2 Jan 200919:00 | – | cve |
 | CVE-2008-5824 | 2 Jan 200919:00 | – | cvelist |
 | [SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow | 17 Jan 201009:36 | – | debian |
| [SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow | 17 Jan 201009:36 | – | debian |
| [SECURITY] [DSA-1972-2] New audiofile packages fix buffer overflow | 21 Jan 201016:07 | – | debian |
10
source: https://www.securityfocus.com/bid/33066/info
Audio File Library ('libaudiofile') is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data.
An attacker can exploit this issue to execute arbitrary machine code in the context of applications using the vulnerable library. Failed exploit attempts will likely cause denial-of-service conditions.
This issue affects libaudiofile 0.2.6; other versions may also be vulnerable.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32691.wavData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Jan 2017 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS 26.8
EPSS0.0602