libsndfile 1.0.24 PAF文件整数溢出漏洞

Bugtraq ID: 48644 libsndfile是一款用于通过标准接口读写AIFF、AU和WAV之类声音文件的C库。 处理Paris Audio PAF文件时"paf24init"函数src/paf.c存在整数溢出错误，提交特制的文件可触发基于堆的缓冲区溢出。成功利用漏洞可以以应用程序上下文执行任意代码。 libsndfile 1.0.24 厂商解决方案 目前没有详细解决方案提供： http://www.mega-nerd.com/libsndfile/...

libsndfile -- PAF file processing integer overflow

Secunia reports: Hossein Lotfi has discovered a vulnerability in libsndfile, which can be exploited by malicious people to potentially compromise an application using the library. The vulnerability is caused due to an integer overflow error in the "paf24init" function src/paf.c when processing...