[SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow

------------------------------------------------------------------------- Debian Security Advisory DSA-1972-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 17, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow

------------------------------------------------------------------------- Debian Security Advisory DSA-1972-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 17, 2010 http://www.debian.org/security/faq -...

SLES10: Security update for audiofile

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: audiofile audiofile-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for audiofile

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: audiofile audiofile-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES9: Security update for audiofile

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: audiofile For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5041620 within the...

SLES9: Security update for audiofile

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: audiofile For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5041620 within the...

SuSE9 Security Update : audiofile (YOU Patch Number 12342)

A heap-overflow in libaudiofile was fixed. The overflow existed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : audiofile (ZYPP Patch Number 5948)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

openSUSE Security Update : audiofile (audiofile-457)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securi...

openSUSE Security Update : audiofile (audiofile-457)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securi...

openSUSE 10 Security Update : audiofile (audiofile-5950)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securi...

CVE-2008-5824

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WAV file...

DEBIAN-CVE-2008-5824

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WAV file...

CVE-2008-5824: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WAV file...

nctaudio.txt

/ ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious webpage...

IE (7 9+ Exes) NCTAudioFile2. AudioFile ActiveX Remo-vulnerability warning-the black bar safety net

/ ------------------------------------------------------------------------------------------------- PoC 7 9 Exes's / IE NCTAudioFile2. AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

KLA10252 ACE vulnerability in multiple software

A buffer overflow was found in multiple products, exploiting NCTAudioFile2.AudioFile. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed call. Original advisories - Exploitation Public exploits exist f...

CVE-2007-0018: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...