CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

DEBIAN-CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

Heap overflow

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

The CVE-2009-1788 issue is a heap-based buffer overflow in libsndfile’s voc_read_header function (versions 1.0.15–1.0.19). It can be triggered by a malformed VOC header, allowing a remote attacker to cause an application crash (denial of service) and potentially execute arbitrary code via a craft...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1791: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

[TKADV2009-006] libsndfile/Winamp VOC Processing Heap Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: libsndfile/Winamp VOC Processing Heap Buffer Overflow Advisory ID: TKADV2009-006 Revision: 1.0 Release Date: 2009/05/16 Last Modified: 2009/05/16 Date Reported: 2009/04/19 Author: Tobias Klein tk at trapkit.de Affected Software: libsndfile =...

libsndfile -- multiple vulnerabilities

Secunia reports: Two vulnerabilities have been reported in libsndfile, which can be exploited by malicious people to compromise an application using the library. A boundary error exists within the "vocreadheader" function in src/voc.c. This can be exploited to cause a heap-based buffer overflow v...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : libsndfile vulnerability (USN-749-1)

It was discovered that libsndfile did not correctly handle description chunks in CAF audio files. If a user or automated system were tricked into opening a specially crafted CAF audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Note that...

GLSA-200904-16 : libsndfile: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200904-16 libsndfile: User-assisted execution of arbitrary code Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow. Impact : A remote...

Gentoo Security Advisory GLSA 200904-16 (libsndfile)

The remote host is missing updates announced in advisory GLSA 200904-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200904-16 (libsndfile)

The remote host is missing updates announced in advisory GLSA 200904-16. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow. Impact A remote attacker could entice a user to...

Mandriva Update for libsndfile MDKSA-2007:191 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDKSA-2007:191 libsndfile Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Ubuntu USN-749-1 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory USN-749-1. OpenVAS Vulnerability Test $Id: ubuntu7491.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7491.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-749-1 libsndfile Authors:...

Ubuntu: Security Advisory (USN-749-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...