CVE-2011-2696: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...

Ubuntu: Security Advisory (USN-1174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libsndfile FEDORA-2011-9325

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for libsndfile MDVSA-2011:119 (libsndfile)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[ MDVSA-2011:119 ] libsndfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:119 http://www.mandriva.com/security/ Package : libsndfile Date : July 25, 2011 Affected: 2009.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered and correcte...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2011:119)

A vulnerability was discovered and corrected in libsndfile : An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the libsndfile library processed certain Ensoniq PARIS Audio Format PAF audio files. An attacker could create a specially crafted PAF file that, whe...

Ubuntu 10.04 LTS / 10.10 / 11.04 : libsndfile vulnerability (USN-1174-1)

Hossein Lotfi discovered that libsndfile did not properly verify the header length and number of channels for PARIS Audio Format PAF audio files. An attacker could exploit this to cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

USN-1174-1: libsndfile vulnerability

Hossein Lotfi discovered that libsndfile did not properly verify the header length and number of channels for PARIS Audio Format PAF audio files. An attacker could exploit this to cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

[SECURITY] Fedora 15 Update: libsndfile-1.0.25-1.fc15

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

RHEL 6 : libsndfile (RHSA-2011:1084)

Updated libsndfile packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2011-2696

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...

libsndfile: Application crash due integer overflow by processing certain PAF audio files

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...

PT-2011-1050

Name of the Vulnerable Software and Affected Versions libsndfile versions prior to 1.0.25 Description The issue is related to multiple vulnerabilities in the libsndfile package, which can lead to a disruption of confidentiality, integrity, and availability of protected information. These...

libsndfile security update

1.0.20-3.1 - fixes integer overflow by processing certain PAF audio files 722841...

libsndfile 1.0.24 PAF文件整数溢出漏洞

Bugtraq ID: 48644 libsndfile是一款用于通过标准接口读写AIFF、AU和WAV之类声音文件的C库。 处理Paris Audio PAF文件时"paf24init"函数src/paf.c存在整数溢出错误，提交特制的文件可触发基于堆的缓冲区溢出。成功利用漏洞可以以应用程序上下文执行任意代码。 libsndfile 1.0.24 厂商解决方案 目前没有详细解决方案提供： http://www.mega-nerd.com/libsndfile/...

libsndfile -- PAF file processing integer overflow

Secunia reports: Hossein Lotfi has discovered a vulnerability in libsndfile, which can be exploited by malicious people to potentially compromise an application using the library. The vulnerability is caused due to an integer overflow error in the "paf24init" function src/paf.c when processing...

Mandriva Update for libsndfile MDVSA-2010:150 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDVSA-2010:150 libsndfile Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for libsndfile MDVSA-2010:150 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDVSA-2010:150 libsndfile Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2010:150)

A vulnerability has been discovered and corrected in libsndfile : The 1 htkreadheader, 2 alawinit, 3 ulawinit, 4 pcminit, 5 float32init, and 6 sdsreadheader functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service divide-by-zero error and application crash via...

MDVA-2009:196 : libsndfile

The x8664 and i586 development packages had conflicting files and weren't installable in parallel. This update modifies the installation of the conflicting files. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...