KLA10791 Buffer overflow vulnerability in VLC media player

Buffer overflow vulnerability was found in VLC media player. By exploiting this vulnerability malicious users can cause a denial of service crash. This vulnerability can be exploited remotely via a crafted wav file. Technical details This vulnerability is in the AStreamPeekStream function in...

Debian DLA-317-1 : vorbis-tools security update

Various issues have been fixed in Debian LTS squeeze for package vorbis-tools. CVE-2014-9638 A crafted WAV file with number of channels set to 0 will cause oggenc to crash due to a division by zero issue. This issue has been fixed upstream by providing a fix for CVE-2014-9639. Reported upstream b...

Boxoft WAV to MP3 Converter Buffer Overflow Vulnerability

Boxoft WAV to MP3 Converter is a set of free audio conversion tools from Boxoft. A buffer overflow vulnerability exists in Boxoft WAV to MP3 Converter. This allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file...

Buffer overflow

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted WAV file...

CVE-2015-7243

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted WAV file...

CVE-2015-7243

Boxoft WAV to MP3 Converter is affected by CVE-2015-7243, a stack/SEH-based buffer overflow in the WAV to MP3 conversion process for versions 1.0 and 1.1. A crafted WAV file can trigger a crash and potentially allow remote code execution. Exploit paths are documented (Exploit-DB/Metasploit module...

FreeBSD : vorbis-tools, opus-tools -- multiple vulnerabilities (a35f415d-572a-11e5-b0a4-f8b156b6dcc8)

Paris Zoumpouloglou reports : I discovered an integer overflow issue in oggenc, related to the number of channels in the input WAV file. The issue triggers an out-of-bounds memory access which causes oggenc to crash. Paris Zoumpouloglou reports : A crafted WAV file with number of channels set to ...

vorbis-tools, opus-tools -- multiple vulnerabilities

Paris Zoumpouloglou reports: I discovered an integer overflow issue in oggenc, related to the number of channels in the input WAV file. The issue triggers an out-of-bounds memory access which causes oggenc to crash. Paris Zoumpouloglou reports: A crafted WAV file with number of channels set to 0...

FreeBSD : sox -- input sanitization errors (92cda470-30cb-11e5-a4a5-002590263bf5)

oCERT reports : The sox command line tool is affected by two heap-based buffer overflows, respectively located in functions startread and AdpcmReadBlock. A specially crafted wav file can be used to trigger the vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Free MP3 CD Ripper Buffer Overflow

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Free MP3 CD Ripper All versions Local Buffer Overflow + Date: 20-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper + Friendly Sites:...

Updated vorbis-tools packages fix security vulnerabilities

Updated vorbis-tools package fixes security vulnerabilities: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero CVE-2014-9638. Integer overflow in oggenc in vorbis-tools 1.4.0 allo...

MGASA-2015-0094 Updated vorbis-tools packages fix security vulnerabilities

Updated vorbis-tools package fixes security vulnerabilities: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero CVE-2014-9638. Integer overflow in oggenc in vorbis-tools 1.4.0 allo...

openSUSE Security Update : snack (openSUSE-2015-183)

snack was updated to fix one security issue. This security issue was fixed : - CVE-2012-6303: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allowed remote attackers to cause a denial of service crash and...

Security update for snack (important)

snack was updated to fix one security issue. This security issue was fixed: - CVE-2012-6303: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allowed remote attackers to cause a denial of service crash and...

AZL-7401 CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

AZL-6953 CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

DEBIAN-CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

Integer overflow

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...