Audacity lib-src/allegro/strparse.cpp栈溢出漏洞

BUGTRAQ ID: 33090 Audacity是跨平台的免费声音编辑器。 Audacity的lib-src/allegro/strparse.cpp库中的Stringparse::getnonspacequoted函数没有正确地解析声音文件中的超长字符串，如果用户受骗打开了特制的.gro文件的话，就可以触发栈溢出，导致执行任意代码。 Dominic Mazzoni Audacity 1.2.6 Dominic Mazzoni --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Audacity 1.6.2 (.gro File) Local Buffer Overflow PoC

No description provided by source. ----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.6.2 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is free, open sour...

Audacity 1.6.2 Local Buffer Overflow

----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.6.2 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is free, open source software for recording and editi...

Audacity 1.6.2 (.gro File) Local Buffer Overflow PoC

No description provided by source. ----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.6.2 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is free, open...

Audacity 1.2.6 - .gro Local Buffer Overflow (PoC)

Audacity 1.2.6 - .gro Local Buffer Overflow PoC ----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.2.6 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is...

Audacity 1.2.6 - '.gro' Local Buffer Overflow (PoC)

----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- Audacity 1.2.6 .gro file Local buffer overflow POC download : http://audacity.sourceforge.net/ Audacity® is free, open source software for recording and...

Audacity 1.6.2 (.gro File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================== Audacity 1.6.2 .gro File Local Buffer Overflow PoC ==================================================== ----------------------------------------------------------- Author : Houssamix...

Gentoo Security Advisory GLSA 200803-03 (audacity)

The remote host is missing updates announced in advisory GLSA 200803-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200803-03 (audacity)

The remote host is missing updates announced in advisory GLSA 200803-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora 8 : audacity-1.3.2-21.fc8 (2008-3456)

A local attacker could exploit Audacity's insecure handling of the directory for temporary files to conduct symlink attacks in order to delete arbitrary files and directories with the privileges of the user running Audacity. Note that Tenable Network Security has extracted the preceding descripti...

Fedora 7 : audacity-1.3.2-21.fc7 (2008-3511)

A local attacker could exploit Audacity's insecure handling of the directory for temporary files to conduct symlink attacks in order to delete arbitrary files and directories with the privileges of the user running Audacity. Note that Tenable Network Security has extracted the preceding descripti...

[SECURITY] Fedora 7 Update: audacity-1.3.2-21.fc7

Audacity is a cross-platform multitrack audio editor. It allows you to record sounds directly or to import Ogg, WAV, AIFF, AU, IRCAM, or MP3 files. It features a few simple effects, all of the editing features you should need, and unlimited undo. The GUI was built with wxWindows and the audio I/O...

[SECURITY] Fedora 8 Update: audacity-1.3.2-21.fc8

Audacity is a cross-platform multitrack audio editor. It allows you to record sounds directly or to import Ogg, WAV, AIFF, AU, IRCAM, or MP3 files. It features a few simple effects, all of the editing features you should need, and unlimited undo. The GUI was built with wxWindows and the audio I/O...

GLSA-200803-03 : Audacity: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-03 Audacity: Insecure temporary file creation Viktor Griph reported that the 'AudacityApp::OnInit' method in file src/AudacityApp.cpp does not handle temporary files properly. Impact : A local attacker could exploit this...

Audacity symbolic links vulnerability

Unsafe temporary files creation...

[ GLSA 200803-03 ] Audacity: Insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

Audacity: Insecure temporary file creation

Background Audacity is a free cross-platform audio editor. Description Viktor Griph reported that the "AudacityApp::OnInit" method in file src/AudacityApp.cpp does not handle temporary files properly. Impact A local attacker could exploit this vulnerability to conduct symlink attacks to delete...

Design/Logic Flaw

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

DEBIAN-CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...