openSUSE Security Update : libsndfile (libsndfile-577)

Specially crafted CAF files could cause an integer overflow in libsndfile CVE-2009-0186. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-577. The text description of this plugin is ...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2009:067)

Crafted data - channels per frame value - in CAF files enables remote attackers to execute arbitrary code or denial of service via a possible integer overflow, leading to a possible heap overflow CVE-2009-0186. This update provides fix for that vulnerability. %NASLMINLEVEL 70300 C Tenable Network...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : libsndfile vulnerability (USN-749-1)

It was discovered that libsndfile did not correctly handle description chunks in CAF audio files. If a user or automated system were tricked into opening a specially crafted CAF audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Note that...

GLSA-200904-16 : libsndfile: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200904-16 libsndfile: User-assisted execution of arbitrary code Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow. Impact : A remote...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow. Impact A remote attacker could entice a user to...

Ubuntu USN-749-1 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory USN-749-1. OpenVAS Vulnerability Test $Id: ubuntu7491.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7491.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-749-1 libsndfile Authors:...

Ubuntu: Security Advisory (USN-749-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : libsndfile (libsndfile-6044)

Specially crafted CAF files could cause an integer overflow in libsndfile CVE-2009-0186. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-6044. The text description of this plugin is...

USN-749-1: libsndfile vulnerability

It was discovered that libsndfile did not correctly handle description chunks in CAF audio files. If a user or automated system were tricked into opening a specially crafted CAF audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program...

Debian Security Advisory DSA 1742-1 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory DSA 1742-1. OpenVAS Vulnerability Test $Id: deb17421.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1742-1 libsndfile Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD : libsndfile -- CAF processing integer overflow vulnerability (c5af0747-1262-11de-a964-0030843d3802)

Secunia reports : The vulnerability is caused due to an integer overflow error in the processing of CAF description chunks. This can be exploited to cause a heap-based buffer overflow by tricking the user into processing a specially crafted CAF audio file. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Security Advisory MDVSA-2009:067 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory MDVSA-2009:067. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2009-0186

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

CVE-2009-0186

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

CVE-2009-0186

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

Integer overflow

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

DEBIAN-CVE-2009-0186

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

CVE-2009-0186

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

CVE-2009-0186

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

libsndfile CAF文件处理堆溢出漏洞

BUGTRAQ ID: 33963 CVECAN ID: CVE-2009-0186 libsndfile是用于通过标准接口读写AIFF、AU和WAV之类声音文件的C库。 libsndfile.dll库在解析CAF描述块时存在整数溢出，最终可能导致堆溢出。如果用户受骗使用链接到该库的播放器打开了特制的CAF音频文件的话，就可以触发这个溢出，导致执行任意代码。 Nullsoft Winamp 5.55 Nullsoft Winamp 5.541 Erik de Castro Lopo libsndfile 1.0.18 厂商补丁： Erik de Castro Lopo...