CVE-2016-6410

CVE-2016-6410 relates to Cisco IOS/IOS XE CAF with the IOx feature enabled, where an authenticated remote attacker could read arbitrary files via unspecified vectors. The root cause is cited as insufficient input validation in CAF. Cisco has released software updates addressing this vulnerability...

PT-2016-3157

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises due to insufficient validation of input data in the Android CAF build, specifically affecting arguments to...

PT-2016-3775

Name of the Vulnerable Software and Affected Versions IBM Tivoli Common Reporting TCR versions 2.1 through 2.1 before IF14 IBM Tivoli Common Reporting TCR versions 2.1.1 through 2.1.1 before IF22 IBM Tivoli Common Reporting TCR versions 2.1.1.2 through 2.1.1.2 before IF9 IBM Tivoli Common Reporti...

CVE-2015-7435: Undefined Security Weakness

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application...

PT-2015-3291

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to pointer dereference errors in the Android operating system from the CAF repository. It may allow a remote attacker to cause memory corruption in the Guest-OS...

PT-2014-1971

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is caused by unauthorized access to an indexable source in the Android operating system from the CAF repository. It may allow a remote attacker to exploit an out-of-range...

CVE-2013-6124

The CVE-2013-6124 entry describes a local privilege escalation in Code Aurora Forum (CAF) Android 4.1.x–4.4.x where Qualcomm Innovation Center (QuIC) init scripts allow a symlink attack to modify file metadata. Specifically, during device startup, init shell scripts run with root privileges and m...

CVE-2013-2599

CVE-2013-2599 refers to a Code Aurora Forum (CAF) patch in Android 4.1.x–4.3.x that modifies NativeDaemonConnector.java. The vulnerability arises from debug logging enabled by this patch, allowing a logcat command to reveal sensitive disk-encryption passwords. Documents from NVD/NIST describe the...

Nullsoft Winamp CAF File Processing Integer Overflow (CVE-2009-0186)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading CAF media file which has file extension .caf. A...

SuSE 11 Security Update : libsndfile (SAT Patch Number 637)

Specially crafted CAF files could cause an integer overflow in libsndfile. CVE-2009-0186 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

openSUSE Security Update : libsndfile (libsndfile-577)

Specially crafted CAF files could cause an integer overflow in libsndfile CVE-2009-0186. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-577. The text description of this plugin is ...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : libsndfile vulnerability (USN-749-1)

It was discovered that libsndfile did not correctly handle description chunks in CAF audio files. If a user or automated system were tricked into opening a specially crafted CAF audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Note that...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2009:067)

Crafted data - channels per frame value - in CAF files enables remote attackers to execute arbitrary code or denial of service via a possible integer overflow, leading to a possible heap overflow CVE-2009-0186. This update provides fix for that vulnerability. %NASLMINLEVEL 70300 C Tenable Network...

GLSA-200904-16 : libsndfile: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200904-16 libsndfile: User-assisted execution of arbitrary code Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow. Impact : A remote...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow. Impact A remote attacker could entice a user to...

Ubuntu: Security Advisory (USN-749-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-749-1 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory USN-749-1. OpenVAS Vulnerability Test $Id: ubuntu7491.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7491.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-749-1 libsndfile Authors:...

openSUSE 10 Security Update : libsndfile (libsndfile-6044)

Specially crafted CAF files could cause an integer overflow in libsndfile CVE-2009-0186. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-6044. The text description of this plugin is...

USN-749-1: libsndfile vulnerability

It was discovered that libsndfile did not correctly handle description chunks in CAF audio files. If a user or automated system were tricked into opening a specially crafted CAF audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program...

Debian Security Advisory DSA 1742-1 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory DSA 1742-1. OpenVAS Vulnerability Test $Id: deb17421.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1742-1 libsndfile Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...