CVE-2009-20004

gAlan 0.2.1 for Windows is affected by a stack-based buffer overflow when parsing .galan files due to improper input length validation. A crafted .galan file can overwrite the stack and execute arbitrary code, with exploitation requiring local user interaction (the user must open the file). The v...

CVE-2009-20004 gAlan <= 0.2.1 Buffer Overflow

gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fails to properly validate the length of input data, allowing a specially crafted file to overwrite the stack and execute arbitrary code...