CVE-2017-6839

Integer overflow in modules/MSADPCM.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

UBUNTU-CVE-2017-6830

Heap-based buffer overflow in the alaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6836

Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6838

Integer overflow in sfcommands/sfconvert.c in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

CVE-2017-6837

WAVE.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via vectors related to a large number of coefficients...

PT-2017-17366 · Unknown +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library versions 0.3.6 Description: The issue is related to an integer overflow in the modules/MSADPCM.cpp file of the Audio File Library. This allows remote attackers to cause a denial of service, resulting in a crash, by using a...

PT-2017-17358 · Audiofile +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library aka audiofile versions 0.2.7 through 0.3.6 Description: The issue is related to a heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp. This allows remote attackers to cause a denial of service crash via a...

PT-2017-17361 · Audiofile +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library aka audiofile versions 0.2.7 through 0.3.6 Description: The issue is related to a heap-based buffer overflow in the ulaw2linear buf function in G711.cpp. This allows remote attackers to cause a denial of service crash via a...

PT-2017-17357 · Unknown +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library version 0.3.6 Description: The issue is related to a heap-based buffer overflow in the alaw2linear buf function in G711.cpp, which allows remote attackers to cause a denial of service crash via a crafted file...

PT-2017-17359 · Unknown +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library versions 0.2.7 through 0.3.6 Description: The issue is a heap-based buffer overflow in the decodeBlock function in MSADPCM.cpp. This allows remote attackers to cause a denial of service crash via a crafted file...

PT-2017-17363 · Libaudiofile +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library versions 0.3.0 through 0.3.6 Description: The issue is a heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h. This allows remote attackers to cause a denial of service cra...

PT-2017-17365 · Unknown +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library version 0.3.6 Description: The issue is related to an integer overflow in the sfcommands/sfconvert.c file, which can be exploited by remote attackers to cause a denial of service, resulting in a crash, by using a crafted...

UBUNTU-CVE-2017-6831

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

UBUNTU-CVE-2017-6837

WAVE.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via vectors related to a large number of coefficients...

CVE-2017-6829

The decodeSample function in IMA.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

PT-2017-17356 · Audiofile +2 · Audio File Library +2

Name of the Vulnerable Software and Affected Versions: Audio File Library aka audiofile version 0.3.6 Description: The issue allows remote attackers to cause a denial of service crash via a crafted file. This is due to the decodeSample function in IMA.cpp. Recommendations: For Audio File Library...

UBUNTU-CVE-2017-6829

The decodeSample function in IMA.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service crash via a crafted file...

[SECURITY] Fedora 22 Update: audiofile-0.3.6-9.fc22

The Audio File library is an implementation of the Audio File Library from SGI, which provides an API for accessing audio file formats like AIFF/AIFF-C, WAVE, and NeXT/Sun .snd/.au files. This library is used by the EsounD daemon. Install audiofile if you are installing EsounD or you need an API...

Audio File Library 0.2.6 - (libaudiofile) 'msadpcm.c' WAV File Processing Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33066/info Audio File Library 'libaudiofile' is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary...

USN-912-1: Audio File Library vulnerability

It was discovered that Audio File Library contained a heap-based buffer overflow. If a user or automated system processed a crafted WAV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...