GLSA-200905-09 : libsndfile: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200905-09 libsndfile: User-assisted execution of arbitrary code The following vulnerabilities have been found in libsndfile: Tobias Klein reported that the headerread function in src/common.c uses user input for calculating a buff...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description The following vulnerabilities have been found in libsndfile: Tobias Klein reported that the headerread function in src/common.c uses user input for calculating a buffer size, possibly leading ...

CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

DEBIAN-CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

Heap overflow

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

CVE-2009-1791

Technical details about CVE-2009-1791 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

DEBIAN-CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

Heap overflow

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

The CVE-2009-1788 issue is a heap-based buffer overflow in libsndfile’s voc_read_header function (versions 1.0.15–1.0.19). It can be triggered by a malformed VOC header, allowing a remote attacker to cause an application crash (denial of service) and potentially execute arbitrary code via a craft...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

[TKADV2009-006] libsndfile/Winamp VOC Processing Heap Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: libsndfile/Winamp VOC Processing Heap Buffer Overflow Advisory ID: TKADV2009-006 Revision: 1.0 Release Date: 2009/05/16 Last Modified: 2009/05/16 Date Reported: 2009/04/19 Author: Tobias Klein tk at trapkit.de Affected Software: libsndfile =...

libsndfile -- multiple vulnerabilities

Secunia reports: Two vulnerabilities have been reported in libsndfile, which can be exploited by malicious people to compromise an application using the library. A boundary error exists within the "vocreadheader" function in src/voc.c. This can be exploited to cause a heap-based buffer overflow v...