Lucene search
FreeBSD3E4FFE76-E0D4-11D8-9B0A-000347A4FA7DHistoryJul 28, 2004 - 12:00 a.m.
SoX buffer overflows when handling .WAV files
2004-07-2800:00:00
vuxml.freebsd.org
12
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.268 Low
EPSS
Percentile
96.7%
Ulf Härnhammar discovered a pair of buffer overflows in the
WAV file handling code of SoX. If an attacker can cause her
victim to process a specially-crafted WAV file with SoX (e.g.
through social engineering or through some other program that
relies on SoX), arbitrary code can be executed with the
privileges of the victim.
Related
nessus
nessus
Fedora Core 1 : sox-12.17.4-4.fc1 (2004-235)
2004-07-28 00:00:00
Mandrake Linux Security Advisory : sox (MDKSA-2004:076)
2004-07-31 00:00:00
Fedora Core 2 : sox-12.17.4-4.fc2 (2004-244)
2004-07-28 00:00:00
debian
debian
[SECURITY] [DSA 565-1] New sox packages fix buffer overflow
2004-10-13 13:34:36
[SECURITY] [DSA 565-1] New sox packages fix buffer overflow
2004-10-13 13:34:36
exploitpack
exploitpack
SoX - .wav Local Buffer Overflow
2004-08-04 00:00:00
seebug
seebug
SoX - (.wav) Local Buffer Overflow Exploiter
2014-07-01 00:00:00
SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)
2006-10-27 00:00:00
openvas
openvas
FreeBSD Ports: sox
2008-09-04 00:00:00
FreeBSD Ports: sox
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200407-23 (SoX)
2008-09-24 00:00:00
securityvulns
securityvulns
[Full-Disclosure] SoX buffer overflows when handling .WAV files
2004-07-29 00:00:00
cve
cve
CVE-2004-0557
2004-08-06 04:00:00
osv
osv
sox - buffer overflows
2004-10-13 00:00:00
redhat
redhat
(RHSA-2004:409) sox security update
2004-07-29 00:00:00
gentoo
gentoo
SoX: Multiple buffer overflows
2004-07-30 00:00:00
packetstorm
packetstorm
evil_song.py
2004-08-05 00:00:00
debiancve
debiancve
CVE-2004-0557
2004-08-06 04:00:00
ubuntucve
ubuntucve
CVE-2004-0557
2004-08-06 00:00:00
exploitdb
exploitdb
SoX - '.wav' Local Buffer Overflow
2004-08-04 00:00:00
suse
suse
remote system compromise in libpng
2004-08-04 15:12:06
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.268 Low
EPSS
Percentile
96.7%
Related for 3E4FFE76-E0D4-11D8-9B0A-000347A4FA7D