[BSA-059] Security Update for libsndfile

Andres Salomon uploaded new packages for libsndfile which fixed the following security problems: CVE-2011-2696 Integer overflow by processing certain PARIS Audio Format PAF files. For the lenny-backports distribution the problem has been fixed in version 1.0.21-3+squeeze1bpo50+1. For the stable...

FreeBSD : libsndfile -- PAF file processing integer overflow (b9f3ffa3-dd6c-11e0-b7fc-000a5e1e33c6)

Secunia reports : Hossein Lotfi has discovered a vulnerability in libsndfile, which can be exploited by malicious people to potentially compromise an application using the library. The vulnerability is caused due to an integer overflow error in the 'paf24init' function src/paf.c when processing...

La Poste FR Website - Reflective Cross Site Vulnerabilities

Document Title: =============== La Poste FR Website - Reflective Cross Site Vulnerabilities Release Date: ============= 2011-08-28 Vulnerability Laboratory ID VL-ID: ==================================== 255 Product & Service Introduction: =============================== La Poste is the mail servi...

DSA-2288-1 libsndfile - integer overflow

Bulletin has no description...

DEBIAN-CVE-2011-2696

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...

CVE-2011-2696

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...

Mandriva Update for libsndfile MDVSA-2011:119 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDVSA-2011:119 libsndfile Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

libsndfile buffer overflow

Buffer overflow on Ensoniq PARIS Audio Format PAF parsing...

Ubuntu 10.04 LTS / 10.10 / 11.04 : libsndfile vulnerability (USN-1174-1)

Hossein Lotfi discovered that libsndfile did not properly verify the header length and number of channels for PARIS Audio Format PAF audio files. An attacker could exploit this to cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

USN-1174-1: libsndfile vulnerability

Hossein Lotfi discovered that libsndfile did not properly verify the header length and number of channels for PARIS Audio Format PAF audio files. An attacker could exploit this to cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

Moderate: Red Hat Security Advisory: libsndfile security update

Updated libsndfile packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

libsndfile: Application crash due integer overflow by processing certain PAF audio files

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PARIS Audio Format PAF file that triggers a heap-based buffer overflow...

Symantec Backup Exec System Recovery 8.5 - Kernel Pointers Dereferences 0day

No description provided by source. include stdio.h include windows.h include winioctl.h include stdlib.h include string.h / Program : Symantec Backup Exec System Recovery 8.5 - 0day Homepage : http://www.symantec.com Discovery : 2009/12/23 Author Contacted : 2011/04/01 - No reply Author Contacted...

Symantec Backup Exec System Recovery 8.5 - Kernel Pointers Dereferences

Symantec Backup Exec System Recovery 8.5 - Kernel Pointers Dereferences include include include include include / Program : Symantec Backup Exec System Recovery 8.5 - 0day Homepage : http://www.symantec.com Discovery : 2009/12/23 Author Contacted : 2011/04/01 - No reply Author Contacted :...

French Hacker Arrested After Bragging on TV !

A French hacker who boasted on TV about hacking into the network of an important defense contractor was arrested and charged with unauthorized access to a computer system, data theft and organized fraud. The hacker appeared on the France 2 television programme "Complément d'enquête" Further...

Security Event : Hack In Paris (16-17 June, 2011)

Security Event : Hack In Paris 16-17 June, 2011 Hack In Paris is an international and corporate security event that will take place in Disneyland Paris® fromJune 16th to 17th of 2011. Please refer to the homepage to get up-to-date information about the event. Topics The following list contains...

Report: French Ministry of Finance Confirms Hack

The French Ministry of Finance has confirmed a report in a French Magazine on Monday that a widespread hack of computers on its networks occurred. The hack, of over 150 MOF machines has been traced to computers in China and appears to have targeted documents that outline France and the G20’s...

Look n stop - Local Denial of Service

Look n stop - Local Denial of Service include include include include include / Program : Look 'n' Stop 2.06p4 / 2.07 6.0.2900.5512 Homepage : http://www.looknstop.com Discovery : 2009/11/08 Author Contacted : 2010/07/15 ... no reply Found by : Heurs This Advisory : Heurs Contact :...