144 matches found
[SECURITY] [DLA 1197-1] sox security update
Package : sox Version : 14.4.0-3+deb7u2 CVE ID : CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15370 CVE-2017-15371 CVE-2017-15372 CVE-2017-15642 Debian Bug : 870328 878810 878809 878808 882236 882144 Various security vulnerabilities were discovered in sox, a command line utility to conve...
Sound eXchange Double Release Vulnerability
Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A double release vulnerability exists in the 'lsxaiffstartread' function of the aiff.c file in versions of SoX prior to 14.4.2. No details of the...
DEBIAN-CVE-2017-11399
Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...
[SECURITY] Fedora 22 Update: vorbis-tools-1.4.0-20.fc22
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...
[SECURITY] Fedora 23 Update: vorbis-tools-1.4.0-22.fc23
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...
[SECURITY] Fedora 20 Update: vorbis-tools-1.4.0-14.fc20
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...
[SECURITY] Fedora 21 Update: vorbis-tools-1.4.0-18.fc21
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...
CVE-2014-2097
The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...
CentOS 3 / 4 / 5 : libvorbis (CESA-2009:1561)
Updated libvorbis packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contain runtime libraries for use in programs that...
Scientific Linux Security Update : libsndfile on SL6.x i386/x86_64
The libsndfile packages provide a library for reading and writing sound files. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the libsndfile library processed certain Ensoniq PARIS Audio Format PAF audio files. An attacker could create a specially crafted...
Xion Audio Player 1.0.127 - '.aiff' Denial of Service
!/usr/bin/python ------------------------------------------------------------------- Xion Audio Player 1.0.127 .aiff Denial of Service Vulnerability found by condis Download : http://xion.r2.com.au/index.php?page=download Tested on : Windows XP SP3 Professional PL Registers : EAX 00000000 ECX...
Fedora Update for libvorbis FEDORA-2012-1652
Check for the Version of libvorbis OpenVAS Vulnerability Test Fedora Update for libvorbis FEDORA-2012-1652 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
[SECURITY] Fedora 16 Update: libvorbis-1.3.3-1.fc16
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis...
CyberLink (Multiple Products) - File Project Handling Stack Buffer Overflow (PoC)
CyberLink Multiple Products - File Project Handling Stack Buffer Overflow PoC !/usr/bin/python Exploit Title: CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC by: modpr0beatspenteradotcom @modpr0be Platform: Windows Tested on: Windows XP SP3, Windows 7 SP1 with: CyberLi...
libsndfile PAF File Integer Overflow (CVE-2011-2696)
A heap buffer overflow vulnerability has been reported in libsndfile C library. The vulnerability is due to an error in the Paris Audio Format PAF processing code of the libsndfile library. A remote attacker could exploit this vulnerability by enticing a target user to download and open a special...
[BSA-059] Security Update for libsndfile
Andres Salomon uploaded new packages for libsndfile which fixed the following security problems: CVE-2011-2696 Integer overflow by processing certain PARIS Audio Format PAF files. For the lenny-backports distribution the problem has been fixed in version 1.0.21-3+squeeze1bpo50+1. For the stable...
DEBIAN-CVE-2011-2696
Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...
CVE-2011-2696
Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...
CVE-2011-2696
Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...
Mandriva Update for libsndfile MDVSA-2011:119 (libsndfile)
Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDVSA-2011:119 libsndfile Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...