Astra Linux – Vulnerability in SOX

A floating-point exception division by zero issue was discovered in SoX within the readsamples function of the voc.c file. An attacker with a malicious file could cause the application to crash...

Fedora Core 10 FEDORA-2009-11499 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory FEDORA-2009-11499. OpenVAS Vulnerability Test $Id: fcore200911499.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11499 libsndfile Authors: Thomas Reinke Copyright: Copyright ...

Mandriva Security Advisory MDVSA-2009:132-1 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory MDVSA-2009:132-1. OpenVAS Vulnerability Test $Id: mdksa20091321.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:132-1 libsndfile Authors: Thomas Reinke Copyright: Copyright c...

Fedora Core 11 FEDORA-2009-11618 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory FEDORA-2009-11618. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Fedora 10 : libsndfile-1.0.20-3.fc10 (2009-11499)

Version 1.0.20 2009-03-14 Fix potential heap overflow in VOC file parser Tobias Klein, http://www.trapkit.de/. Version 1.0.19 2009-03-02 Fix for CVE-2009-0186 Alin Rad Pop, Secunia Research. Huge number of minor bug fixes as a result of static analysis. Version 1.0.18 2009-02-07 Add Ogg/Vorbis...

Fedora 11 : libsndfile-1.0.20-3.fc11 (2009-11618)

Version 1.0.20 2009-03-14 Fix potential heap overflow in VOC file parser Tobias Klein, http://www.trapkit.de/. Version 1.0.19 2009-03-02 Fix for CVE-2009-0186 Alin Rad Pop, Secunia Research. Huge number of minor bug fixes as a result of static analysis. Version 1.0.18 2009-02-07 Add Ogg/Vorbis...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2009:132-1)

Multiple vulnerabilities has been found and corrected in libsndfile : Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly...

FreeBSD : libsndfile -- multiple vulnerabilities (6355efdb-4d4d-11de-8811-0030843d3802)

Secunia reports : Two vulnerabilities have been reported in libsndfile, which can be exploited by malicious people to compromise an application using the library. A boundary error exists within the 'vocreadheader' function in src/voc.c. This can be exploited to cause a heap-based buffer overflow...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description The following vulnerabilities have been found in libsndfile: Tobias Klein reported that the headerread function in src/common.c uses user input for calculating a buffer size, possibly leading ...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

Heap overflow

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...

CVE-2009-1788

The CVE-2009-1788 issue is a heap-based buffer overflow in libsndfile’s voc_read_header function (versions 1.0.15–1.0.19). It can be triggered by a malformed VOC header, allowing a remote attacker to cause an application crash (denial of service) and potentially execute arbitrary code via a craft...

CVE-2009-1788

Heap-based buffer overflow in vocreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a VOC file with an invalid header value...