Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : libsndfile vulnerability (USN-749-1)

It was discovered that libsndfile did not correctly handle description chunks in CAF audio files. If a user or automated system were tricked into opening a specially crafted CAF audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Note that...

GLSA-200904-16 : libsndfile: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200904-16 libsndfile: User-assisted execution of arbitrary code Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow. Impact : A remote...

Gentoo Security Advisory GLSA 200904-16 (libsndfile)

The remote host is missing updates announced in advisory GLSA 200904-16. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200904-16 (libsndfile)

The remote host is missing updates announced in advisory GLSA 200904-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow. Impact A remote attacker could entice a user to...

Mandriva Update for libsndfile MDKSA-2007:191 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDKSA-2007:191 libsndfile Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Ubuntu USN-749-1 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory USN-749-1. OpenVAS Vulnerability Test $Id: ubuntu7491.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7491.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-749-1 libsndfile Authors:...

Ubuntu: Security Advisory (USN-749-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : libsndfile (libsndfile-6044)

Specially crafted CAF files could cause an integer overflow in libsndfile CVE-2009-0186. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-6044. The text description of this plugin is...

USN-749-1: libsndfile vulnerability

It was discovered that libsndfile did not correctly handle description chunks in CAF audio files. If a user or automated system were tricked into opening a specially crafted CAF audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program...

Ubuntu Update for libsndfile vulnerability USN-525-1

Ubuntu Update for Linux kernel vulnerabilities USN-525-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5251.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libsndfile vulnerability USN-525-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-525-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: libsndfile

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: libsndfile

The remote host is missing an update to the system as announced in the referenced advisory. VID c5af0747-1262-11de-a964-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID c5af0747-1262-11de-a964-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1742-1 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory DSA 1742-1. OpenVAS Vulnerability Test $Id: deb17421.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1742-1 libsndfile Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1742-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : libsndfile -- CAF processing integer overflow vulnerability (c5af0747-1262-11de-a964-0030843d3802)

Secunia reports : The vulnerability is caused due to an integer overflow error in the processing of CAF description chunks. This can be exploited to cause a heap-based buffer overflow by tricking the user into processing a specially crafted CAF audio file. %NASLMINLEVEL 70300 C Tenable Network...

Debian DSA-1742-1 : libsndfile - integer overflow

Alan Rad Pop discovered that libsndfile, a library to read and write sampled audio data, is prone to an integer overflow. This causes a heap-based buffer overflow when processing crafted CAF description chunks possibly leading to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network...

DSA-1742-1 libsndfile - arbitrary code execution

Bulletin has no description...

Mandrake Security Advisory MDVSA-2009:067 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory MDVSA-2009:067. OpenVAS Vulnerability Test $Id: mdksa2009067.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:067 libsndfile Authors: Thomas Reinke Copyright: Copyright c 2009...