Gentoo Security Advisory GLSA 200407-23 (SoX)

The remote host is missing updates announced in advisory GLSA 200407-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: sox

The remote host is missing an update to the system as announced in the referenced advisory. VID 3e4ffe76-e0d4-11d8-9b0a-000347a4fa7d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: sox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-565-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 565-1 (sox)

The remote host is missing an update to sox announced via advisory DSA 565-1. OpenVAS Vulnerability Test $Id: deb5651.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 565-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)

No description provided by source. --------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...

SoX Local Buffer Overflow Exploit

No description provided by source. POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jm...

Debian DSA-565-1 : sox - buffer overflow

Ulf Harnhammar has reported two vulnerabilities in SoX, a universal sound sample translator, which may be exploited by malicious people to compromise a user's system with a specially crafted .wav file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 565-1] New sox packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 565-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 565-1] New sox packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 565-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

DSA-565-1 sox - buffer overflows

Bulletin has no description...

GLSA-200407-23 : SoX: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200407-23 SoX: Multiple buffer overflows Ulf Harnhammar discovered two buffer overflows in the sox and play commands when handling WAV files with specially crafted header fields. Impact : By enticing a user to play or convert a...

FreeBSD : SoX buffer overflows when handling .WAV files (181)

The following package needs to be updated: sox %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3e4ffe76e0d411d89b0a000347a4fa7d.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006...

[slackware-security] sox

New sox packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix buffer overflow security issues that could allow a malicious WAV file to execute arbitrary code. Here are the details from the Slackware 10.0 ChangeLog: Sat Aug 7 17:17:20 AKDT 2004...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

evil_song.py

POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp" from libc.so , change this ...

SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)

Exploit for linux platform in category local exploits ========================================================== SoX Local Buffer Overflow Exploiter Via Crafted WAV File ========================================================== --------------------------------- Begin Code: sox-exploiter.c...

SoX - .wav Local Buffer Overflow

SoX - .wav Local Buffer Overflow //--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

CVE-2004-0557

CVE-2004-0557 covers two buffer overflows in SoX (St_WavStartRead in wav.c) affecting 12.17.2–12.17.4. A remote attacker could execute arbitrary code by feeding a specially crafted WAV header. Public docs identify the vulnerable function and the header-field handling as the root cause; affected v...