CVE-2009-0186

CVE-2009-0186 concerns libsndfile 1.0.18 and its CAF file parser. The vulnerability is an integer overflow in CAF chunk handling that can trigger a heap-based buffer overflow, allowing context-dependent attackers to potentially execute arbitrary code via crafted CAF files. The issue was publicly ...

CVE-2009-0186

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

CVE-2009-0186: Undefined Security Weakness

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow...

libsndfile CAF文件处理堆溢出漏洞

BUGTRAQ ID: 33963 CVECAN ID: CVE-2009-0186 libsndfile是用于通过标准接口读写AIFF、AU和WAV之类声音文件的C库。 libsndfile.dll库在解析CAF描述块时存在整数溢出，最终可能导致堆溢出。如果用户受骗使用链接到该库的播放器打开了特制的CAF音频文件的话，就可以触发这个溢出，导致执行任意代码。 Nullsoft Winamp 5.55 Nullsoft Winamp 5.541 Erik de Castro Lopo libsndfile 1.0.18 厂商补丁： Erik de Castro Lopo...

libsndfile / WinAmp integer overflow

Integer overflow on .CAF format parsing...

Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability

====================================================================== Secunia Research 03/03/2009 - libsndfile CAF Processing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

libsndfile -- CAF processing integer overflow vulnerability

Secunia reports: The vulnerability is caused due to an integer overflow error in the processing of CAF description chunks. This can be exploited to cause a heap-based buffer overflow by tricking the user into processing a specially crafted CAF audio file...

Fedora Update for libsndfile FEDORA-2007-2236

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libsndfile FEDORA-2007-2236

Check for the Version of libsndfile OpenVAS Vulnerability Test Fedora Update for libsndfile FEDORA-2007-2236 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Gentoo Security Advisory GLSA 200710-04 (libsndfile)

The remote host is missing updates announced in advisory GLSA 200710-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200710-04 (libsndfile)

The remote host is missing updates announced in advisory GLSA 200710-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1442-2 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory DSA 1442-2. OpenVAS Vulnerability Test $Id: deb14422.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1442-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1442-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : libsndfile (libsndfile-4430)

This update fixes a possible buffer overflow that occurs while reading decoded PCM data from the FLAC library. CVE-2007-4974 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-4430. Th...

SuSE 10 Security Update : libsndfile (ZYPP Patch Number 4431)

This update fixes a possible buffer overflow that occurs while reading decoded PCM data from the FLAC library. CVE-2007-4974 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Debian DSA-1442-1 : libsndfile - buffer overflow

Rubert Buchholz discovered that libsndfile, a library for reading / writing audio files, performs insufficient boundary checks when processing FLAC files, which might lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] [DSA 1442-2] New libsndfile packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1442-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 29, 2007 http://www.debian.org/security/faq -...

DSA-1442-1 libsndfile

Bulletin has no description...

Ubuntu 6.06 LTS / 6.10 / 7.04 : libsndfile vulnerability (USN-525-1)

Robert Buchholz discovered that libsndfile did not correctly validate the size of its memory buffers. If a user were tricked into playing a specially crafted FLAC file, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the...

Fedora 7 : libsndfile-1.0.17-2.fc7 (2007-2236)

An updated libsndfile package has been released, fixing a potential heap-based buffer overflow in malcrafted flac files. Thx to Robert Buchholz for finding that issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...