CVE-2009-0490

CVE-2009-0490 description and connected advisories confirm a stack-based buffer overflow in Audacity’s parsing of GRO files: specifically in String_parse::get_nonspace_quoted() within lib-src/allegro/strparse.cpp. Affected versions include Audacity 1.2.6 and other versions prior to 1.3.6. Remote ...

CVE-2009-0490

Stack-based buffer overflow in the Stringparse::getnonspacequoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .gro file containing a long string...

CVE-2009-0490

Stack-based buffer overflow in the Stringparse::getnonspacequoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .gro file containing a long string...

CVE-2009-0490: Out-of-bounds Write

Stack-based buffer overflow in the Stringparse::getnonspacequoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .gro file containing a long string...

DTSA-192-1 audacity - arbitrary code execution

Bulletin has no description...

Audacity 1.6.2 (.aup File) Remote off by one Crash Exploit

No description provided by source. usage: exploit.py print "" print " Audacity 1.6.2 .aup file Remote off by one Crash Exploit\n" print " Author: Mountassif Moad " print " the best: Evil finger & v4 Team " print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to: All friends" print "...

Audacity '.aup'项目文件解析缓冲区溢出漏洞

BUGTRAQ ID: 33160 CNCAN ID：CNCAN-2009010801 Audacity是一款数码音效处理程序。 Audacity处理'.aup'文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含超长字符的'.aup'文件，诱使用户使用Audacity导入，可导致以应用程序权限执行任意指令。 Audacity 1.6.2 厂商解决方案 目前没有详细解决方案提供： http://audacity.sourceforge.net/ http://www.sebug.net/exploit/5573/...

Audacity 1.6.2 Crash Exploit

usage: exploit.py print "" print " Audacity 1.6.2 .aup file Remote off by one Crash Exploit\n" print " Author: Mountassif Moad " print " the best: Evil finger & v4 Team " print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to: All friends" print " almawto li israel\n" print "" header =...

Audacity 1.6.2 (.aup File) Remote off by one Crash Exploit

Exploit for unknown platform in category dos / poc ========================================================== Audacity 1.6.2 .aup File Remote off by one Crash Exploit ========================================================== usage: exploit.py print "" print " Audacity 1.6.2 .aup file Remote off ...

Audacity 1.6.2 - .aup Remote Off-by-One Crash

Audacity 1.6.2 - .aup Remote Off-by-One Crash usage: exploit.py print "" print " Audacity 1.6.2 .aup file Remote off by one Crash Exploit\n" print " Author: Mountassif Moad " print " the best: Evil finger & v4 Team " print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to: All friends"...

Audacity 1.6.2 - '.aup' Remote Off-by-One Crash

usage: exploit.py print "" print " Audacity 1.6.2 .aup file Remote off by one Crash Exploit\n" print " Author: Mountassif Moad " print " the best: Evil finger & v4 Team " print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to: All friends" print " almawto li israel\n" print "" header =...

Audacity lib-src/allegro/strparse.cpp栈溢出漏洞

BUGTRAQ ID: 33090 Audacity是跨平台的免费声音编辑器。 Audacity的lib-src/allegro/strparse.cpp库中的Stringparse::getnonspacequoted函数没有正确地解析声音文件中的超长字符串，如果用户受骗打开了特制的.gro文件的话，就可以触发栈溢出，导致执行任意代码。 Dominic Mazzoni Audacity 1.2.6 Dominic Mazzoni --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Audacity 1.6.2 Local Buffer Overflow

----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.6.2 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is free, open source software for recording and editi...

Audacity 1.6.2 (.gro File) Local Buffer Overflow PoC

No description provided by source. ----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.6.2 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is free, open sour...

Audacity 1.2.6 - .gro Local Buffer Overflow (PoC)

Audacity 1.2.6 - .gro Local Buffer Overflow PoC ----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.2.6 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is...

Audacity 1.6.2 (.gro File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================== Audacity 1.6.2 .gro File Local Buffer Overflow PoC ==================================================== ----------------------------------------------------------- Author : Houssamix...

Audacity 1.6.2 (.gro File) Local Buffer Overflow PoC

No description provided by source. ----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.6.2 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is free, open...

Audacity 1.2.6 - '.gro' Local Buffer Overflow (PoC)

----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.2.6 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is free, open source software for recording and...

Gentoo Security Advisory GLSA 200803-03 (audacity)

The remote host is missing updates announced in advisory GLSA 200803-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200803-03 (audacity)

The remote host is missing updates announced in advisory GLSA 200803-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...