DSA-565-1 sox - buffer overflows

Bulletin has no description...

GLSA-200407-23 : SoX: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200407-23 SoX: Multiple buffer overflows Ulf Harnhammar discovered two buffer overflows in the sox and play commands when handling WAV files with specially crafted header fields. Impact : By enticing a user to play or convert a...

FreeBSD : SoX buffer overflows when handling .WAV files (181)

The following package needs to be updated: sox %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3e4ffe76e0d411d89b0a000347a4fa7d.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006...

[slackware-security] sox

New sox packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix buffer overflow security issues that could allow a malicious WAV file to execute arbitrary code. Here are the details from the Slackware 10.0 ChangeLog: Sat Aug 7 17:17:20 AKDT 2004...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

evil_song.py

POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp" from libc.so , change this ...

SoX - .wav Local Buffer Overflow

SoX - .wav Local Buffer Overflow //--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...

SoX Local Buffer Overflow Exploiter (Via Crafted WAV File)

Exploit for linux platform in category local exploits ========================================================== SoX Local Buffer Overflow Exploiter Via Crafted WAV File ========================================================== --------------------------------- Begin Code: sox-exploiter.c...

CVE-2004-0557

CVE-2004-0557 covers two buffer overflows in SoX (St_WavStartRead in wav.c) affecting 12.17.2–12.17.4. A remote attacker could execute arbitrary code by feeding a specially crafted WAV header. Public docs identify the vulnerable function and the header-field handling as the root cause; affected v...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

CVE-2004-0557: Undefined Security Weakness

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

SoX - Local Buffer Overflow

SoX - Local Buffer Overflow POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp"...

SoX Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ================================= SoX Local Buffer Overflow Exploit ================================= POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat email protected |...

SoX - Local Buffer Overflow

POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp" from libc.so , change this ...

Mandrake Linux Security Advisory : sox (MDKSA-2004:076)

Ulf Harnhammar discovered two buffer overflows in SoX. They occur when the sox or play commands handle malicious .WAV files. Versions 12.17.4, 12.17.3 and 12.17.2 are vulnerable to these overflows. 12.17.1, 12.17 and 12.16 are some versions that are not. %NASLMINLEVEL 70300 C Tenable Network...

RHEL 3 : sox (RHSA-2004:409)

Updated sox packages that fix buffer overflows in the WAV file handling code are now available. SoX Sound eXchange is a sound file format converter. SoX can convert between many different digitized sound formats and perform simple sound manipulation functions, including sound effects. Buffer...

SoX: Multiple buffer overflows

Background SoX is a command line utility that can convert various formats of computer audio files in to other formats. Description Ulf Harnhammar discovered two buffer overflows in the sox and play commands when handling WAV files with specially crafted header fields. Impact By enticing a user to...

Important: Red Hat Security Advisory: sox security update

Updated sox packages that fix buffer overflows in the WAV file handling code are now available. SoX Sound eXchange is a sound file format converter. SoX can convert between many different digitized sound formats and perform simple sound manipulation functions, including sound effects. Buffer...

SoX multiple buffer overflows

Few buffer overflow on parsing .wav files...

[Full-Disclosure] SoX buffer overflows when handling .WAV files

SoX buffer overflows when handling .WAV files I have found two buffer overflows in SoX. They occur when the sox or play commands handle malicious .WAV files. The overflows have the identifier CAN-2004-0557. Versions 12.17.4, 12.17.3 and 12.17.2 are vulnerable to these overflows. Vulnerable versio...