SoX: User-assisted execution of arbitrary code

Background SoX is a command line utility that can convert various formats of computer audio files in to other formats. Description A heap-based buffer overflow can be triggered when processing a malicious NIST Sphere or WAV audio file. Impact A remote attacker could coerce the victim to run SoX...

SoX Memory Corruption Vulnerability

SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A memory corruption vulnerability exists in SoX that stems from the program failing to perform proper boundary checks on user-submitted input. An attacker could...

FreeBSD : sox -- input sanitization errors (92cda470-30cb-11e5-a4a5-002590263bf5)

oCERT reports : The sox command line tool is affected by two heap-based buffer overflows, respectively located in functions startread and AdpcmReadBlock. A specially crafted wav file can be used to trigger the vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

FreeBSD : sox -- memory corruption vulnerabilities (9dd761ff-30cb-11e5-a4a5-002590263bf5)

Michele Spagnuolo, Google Security Team, reports : The write heap buffer overflows are related to ADPCM handling in WAV files, while the read heap buffer overflow is while opening a .VOC. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

sox -- memory corruption vulnerabilities

Michele Spagnuolo, Google Security Team, reports: The write heap buffer overflows are related to ADPCM handling in WAV files, while the read heap buffer overflow is while opening a .VOC...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the sox-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the sox package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian DLA-128-1 : sox security update

Michele Spagnuolo of the Google Security Team discovered two heap-based buffer overflows in SoX, the Swiss Army knife of sound processing programs. A specially crafted wav file could cause an application using SoX to crash or, possibly, execute arbitrary code. NOTE: Tenable Network Security has...

PT-2021-7702 · Sox +4 · Sox +4

Name of the Vulnerable Software and Affected Versions: sox version 14.4.1 Description: A flaw in the lsx adpcm init function within libsox leads to a global-buffer-overflow. This issue allows an attacker to input a malicious file, resulting in the disclosure of sensitive information. The...

Fedora Update for sox FEDORA-2015-1943

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : sox-14.4.1-7.fc21 (2015-1943)

Security fix for CVE-2014-8145 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Mandriva Linux Security Advisory : sox (MDVSA-2015:015)

Updated sox packages fix security vulnerability : The sox command line tool is affected by two heap-based buffer overflows, respectively located in functions startread and AdpcmReadBlock. A specially crafted wav file can be used to trigger the vulnerabilities CVE-2014-8145. %NASLMINLEVEL 70300 C...

[SECURITY] [DLA 128-1] sox security update

Package : sox Version : 14.3.1-1+deb6u1 CVE ID : CVE-2014-8145 Debian Bug : 773720 Michele Spagnuolo of the Google Security Team dicovered two heap-based buffer overflows in SoX, the Swiss Army knife of sound processing programs. A specially crafted wav file could cause an application using SoX t...

DLA-128-1 sox - security update

Bulletin has no description...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

Heap overflow

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

CVE-2014-8145

CVE-2014-8145 affects SoX (Sound eXchange) 14.4.1 and earlier across multiple distros. The flaw comprises multiple heap-based buffer overflows triggered by crafted WAV (and related) files, notably via start_read and AdpcmReadBlock in wav processing, leading to remote impact with unspecified conse...

CVE-2014-8145

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...