FreeBSD : SoX buffer overflows when handling .WAV files (3e4ffe76-e0d4-11d8-9b0a-000347a4fa7d)

Ulf Harnhammar discovered a pair of buffer overflows in the WAV file handling code of SoX. If an attacker can cause her victim to process a specially crafted WAV file with SoX e.g. through social engineering or through some other program that relies on SoX, arbitrary code can be executed with the...

Mandriva Update for k3b MDKA-2007:064 (k3b)

Check for the Version of k3b OpenVAS Vulnerability Test Mandriva Update for k3b MDKA-2007:064 k3b Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Gentoo Security Advisory GLSA 200407-23 (SoX)

The remote host is missing updates announced in advisory GLSA 200407-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200407-23 (SoX)

The remote host is missing updates announced in advisory GLSA 200407-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: sox

The remote host is missing an update to the system as announced in the referenced advisory. VID 3e4ffe76-e0d4-11d8-9b0a-000347a4fa7d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: sox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-565-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 565-1 (sox)

The remote host is missing an update to sox announced via advisory DSA 565-1. OpenVAS Vulnerability Test $Id: deb5651.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 565-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SoX Local Buffer Overflow Exploit

No description provided by source. POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jm...

SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)

No description provided by source. --------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...

Debian DSA-565-1 : sox - buffer overflow

Ulf Harnhammar has reported two vulnerabilities in SoX, a universal sound sample translator, which may be exploited by malicious people to compromise a user's system with a specially crafted .wav file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 565-1] New sox packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 565-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 565-1] New sox packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 565-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

DSA-565-1 sox - buffer overflows

Bulletin has no description...

GLSA-200407-23 : SoX: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200407-23 SoX: Multiple buffer overflows Ulf Harnhammar discovered two buffer overflows in the sox and play commands when handling WAV files with specially crafted header fields. Impact : By enticing a user to play or convert a...

FreeBSD : SoX buffer overflows when handling .WAV files (181)

The following package needs to be updated: sox %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3e4ffe76e0d411d89b0a000347a4fa7d.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006...

[slackware-security] sox

New sox packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix buffer overflow security issues that could allow a malicious WAV file to execute arbitrary code. Here are the details from the Slackware 10.0 ChangeLog: Sat Aug 7 17:17:20 AKDT 2004...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

evil_song.py

POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp" from libc.so , change this ...

SoX - .wav Local Buffer Overflow

SoX - .wav Local Buffer Overflow //--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...