Mumble needSamples方法堆缓冲区溢出漏洞

BUGTRAQ ID: 65374 CVECAN ID: CVE-2014-0045 Mumble是玩游戏时使用的开源的、低延迟的语音聊天软件。 Mumble 1.2.4及其他版本客户端的AudioOutputSpeech.cpp中，needSamples方法没有检查opusdecodefloat函数的返回值，这可使远程攻击者通过特制的Opus声音数据包造成拒绝服务并执行任意代码。 0 sourceforge Mumble 1.2.4 厂商补丁： sourceforge ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Heap overflow

The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not check the return value of the opusdecodefloat function, which allows...

CVE-2014-0045

CVE-2014-0045 affects Mumble: in needSamples, the code path via opus_decode_float does not check the return value, allowing a crafted Opus voice packet to trigger a heap-based buffer over-read/over-write and a crash, potentially enabling arbitrary code execution. Affected: Mumble 1.2.4 and the 1....

CVE-2014-0045

The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not check the return value of the opusdecodefloat function, which allows...

CVE-2014-0045

The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not check the return value of the opusdecodefloat function, which allows...

CVE-2014-0045: Undefined Security Weakness

The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not check the return value of the opusdecodefloat function, which allows...

PT-2014-1786

Name of the Vulnerable Software and Affected Versions Mumble versions 1.1 through 1.2.4 Mumble for iOS versions 1.1 through 1.2.2 MumbleKit versions prior to commit fd190328a9b24d37382b269a5674b0c0c7a7e36d Description The issue concerns multiple vulnerabilities in the Mumble package of the Debian...