CVE-2017-6828

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

Heap overflow

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

CVE-2017-6828

CVE-2017-6828 affects audiofile (libaudiofile) 0.3.6 with a heap-based overflow in readValue(FileHandle.cpp) triggered by a crafted WAV file. The CVE entry notes unspecified impact; related advisories and Debian/MPL/Mageia notes indicate exposure could lead to denial of service or arbitrary code ...

CVE-2017-6827

CVE-2017-6827 is a heap-based buffer overflow in the MSADPCM::initializeCoefficients function of audiofile (libaudiofile) 0.3.6, allowing remote attackers to impact via a crafted audio file. Connected advisories confirm this vulnerability across multiple distributions: Debian DSA-3814 fixed in 0....

CVE-2017-6827: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file...

CVE-2017-6828: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

CVE-2017-6828

Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile aka libaudiofile and Audio File Library 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file...

The vulnerability of the libaudiofile library, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the msadpcm.c file in the libaudiofile library arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a local attacker to cause a service failure application termination or execute arbitrary code using a specially crafted WAV fi...

Updated audiofile packages fixes security vulnerability

When libaudiofile is used to change both the number of channels of an audio file e.g. from stereo to mono and the sample format e.g. from 16-bit samples to 8-bit samples, the output file will contain corrupted data. If the new sample format is smaller than the old one, there is a risk of buffer...

MGASA-2015-0408 Updated audiofile packages fixes security vulnerability

When libaudiofile is used to change both the number of channels of an audio file e.g. from stereo to mono and the sample format e.g. from 16-bit samples to 8-bit samples, the output file will contain corrupted data. If the new sample format is smaller than the old one, there is a risk of buffer...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libaudiofile-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Audio File Library 0.2.6 - (libaudiofile) 'msadpcm.c' WAV File Processing Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33066/info Audio File Library 'libaudiofile' is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary...

FreeBSD : libaudiofile -- heap-based overflow in Microsoft ADPCM compression module (09f47c51-c1a6-11e3-a5ac-001b21614864)

Debian reports : Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted WAV file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 10 Security Update : audiofile (ZYPP Patch Number 7394)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. This update also contains fixed audiofile-32bit packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

SuSE 10 Security Update : audiofile (ZYPP Patch Number 7315)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. This update also contains fixed audiofile-32bit packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

[SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow

------------------------------------------------------------------------- Debian Security Advisory DSA-1972-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 17, 2010 http://www.debian.org/security/faq -...

DSA-1972-1 audiofile - buffer overflow

Bulletin has no description...

SuSE9 Security Update : audiofile (YOU Patch Number 12342)

A heap-overflow in libaudiofile was fixed. The overflow existed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : audiofile (ZYPP Patch Number 5948)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

openSUSE Security Update : audiofile (audiofile-457)

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securi...