[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33

MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...

Use-after-free

sox is vulnerable to use-after-free. The vulnerability exists in lsxaiffstartread in aiff.c, allowing a malicious user to exploit this flaw by supplying a malformed AIFF file which may lead to denial of service DoS during the conversion of an audio file...

Apple macOS AudioToolboxCore AIFF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Huawei EulerOS: Security Advisory for sox (EulerOS-SA-2018-1083)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sox (EulerOS-SA-2018-1084)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : sox (ALAS-2019-1352)

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files.CVE-2017-18189 C Tenable Network Security, Inc. The descriptive text and package checks...

Low: sox

Issue Overview: A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files.CVE-2017-18189 Affected Packages: sox Note: This advisory is applicable...

sox: NULL pointer dereference in startread function in xa.c

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files...

[SECURITY] Fedora 30 Update: libmediainfo-19.04-1.fc30

This package contains the shared library for MediaInfo. MediaInfo supplies technical and tag information about a video or audio file. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio:...

EulerOS Virtualization 3.0.1.0 : libsndfile (EulerOS-SA-2019-1441)

According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds read in the function d2ulawarray in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or informatio...

[SECURITY] Fedora 27 Update: audiofile-0.3.6-21.fc27

The Audio File library is an implementation of the Audio File Library from SGI, which provides an API for accessing audio file formats like AIFF/AIFF-C, WAVE, and NeXT/Sun .snd/.au files. This library is used by the EsounD daemon. Install audiofile if you are installing EsounD or you need an API...

Heap-based Buffer Overflow

libsndfile is vulnerable to heap-based buffer overflow. This is due to the wrong management of the headindex and headend values while parsing AIFF header values. An attacker is able to exploit this vulnerability to overwrite memory heap by manipulating index values to use memcpy via a malicious...

RealOne Player Denial of Service Vulnerability

RealOne Player is a Media Player software developed and maintained by Real. A security vulnerability exists in RealOne Player version 2.0 Build 6.0.11.872. The vulnerability can be exploited by remote attackers to cause a denial of service array out-of-bounds access and application crash via...

Design/Logic Flaw

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service array out-of-bounds access and application crash via a crafted .aiff file...

CVE-2018-13121

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service array out-of-bounds access and application crash via a crafted .aiff file...

CVE-2018-13121

CVE-2018-13121 affects RealOne Player 2.0 Build 6.0.11.872, where processing a specially crafted .aiff file can cause a denial of service via array out-of-bounds access, resulting in an application crash. The entry documents this vulnerability and provides CVSS metrics (CVSS2: 4.3/10; CVSS3: 5.5/...

CVE-2018-13121

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service array out-of-bounds access and application crash via a crafted .aiff file...

EulerOS 2.0 SP1 : sox (EulerOS-SA-2018-1083)

According to the versions of the sox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SoX Sound eXchange is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound...

CVE-2017-18189

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files...

The vulnerability of the aiff_read_chanmap function in the libsndfile library, which allows an attacker to compromise confidentiality, integrity, and accessibility of data.

The vulnerability of the aiffreadchanmap function in the aaiff.c file of the libsndfile library relates to accessing beyond the buffer memory boundaries. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of...