1482 matches found
phiola 安全漏洞
phiola is a fast audio player, recorder, and converter for Windows, Linux, and Android by Simon Zolin Personal Developer. A security vulnerability exists in phiola version v2.0-rc22, which originates from a vulnerability that allows remote attackers to execute arbitrary code via a crafted wav fil...
phiola 安全漏洞
phiola is a fast audio player, recorder, and converter for Windows, Linux, and Android by Simon Zolin Personal Developer. A security vulnerability exists in phiola version v2.0-rc22, which originates from a vulnerability that allows remote attackers to cause a denial of service via a crafted wav...
CVE-2024-33431
An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file...
PT-2024-25252 · Phiola · Phiola
Name of the Vulnerable Software and Affected Versions: phiola version 2.0-rc22 Description: An issue in phiola/src/afilter/pcm convert.h:513 allows a remote attacker to execute arbitrary code via a crafted .wav file. Recommendations: For phiola version 2.0-rc22, at the moment, there is no...
CVE-2024-33428
Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33431
The CVE-2024-33431 issue affects phiola v2.0-rc22, where a flaw in phiola/src/afilter/conv.c:115 can be triggered by processing a crafted WAV file, enabling a remote attacker to cause a denial of service. Multiple connected sources (Red Hat, CVE lists, CNNVD, PT Security) corroborate the same des...
Moderate: libsndfile security update
libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS CVE-2022-33065 For more details about the security issues, including the impact, a CVSS score,...
CVE-2024-20794 Adobe Animate 2024 WAV File Parsing Null Pointer Dereference
Animate versions 23.0.4, 24.0.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause a system crash, resulting in a denial of service. Exploitation of this issue requires us...
CVE-2024-20794 Adobe Animate 2024 WAV File Parsing Null Pointer Dereference
Animate versions 23.0.4, 24.0.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause a system crash, resulting in a denial of service. Exploitation of this issue requires us...
ROS-20240404-20
A vulnerability in the Vorbis-tools package is related to the conversion of wav files to ogg files. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Medium: libsndfile
Issue Overview: An off-by-one error in function wavreadheader in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts. CVE-2022-33064 Affected Packages: libsndfile Issue Correction: Run d...
OESA-2023-1931 sox security update
SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply various effects to these sound files, and, as an added bonus, SoX can play and record audio files on most platforms. Security...
Denial Of Service (DoS)
vorbis-tools is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the library, which allows an attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
SUSE SLES12 Security Update : vorbis-tools (SUSE-SU-2023:4218-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4218-1 advisory. - CVE-2023-43361: Fixed a buffer overflow vulnerability during the conversion of wav files to ogg files. bsc1215942 Tenable has extracted th...
The vulnerability of the ICMPv6 network protocol implementation in Junos QFX5K routers allows a attacker to cause a service failure.
The vulnerability of the ICMPv6 network protocol implementation in Junos QFX5K routers lies in the execution of a loop with an unavailable exit condition when processing WAV/AVI format files. Exploiting this vulnerability allows a remote attacker to cause service failures...
CVE-2023-43361
A buffer overflow vulnerability was found in vorbis-tools. This flaw allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of WAV files to OGG files. Mitigation Mitigation for this issue is either not available or the currently available options do...
SUSE CVE-2023-43361
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
DEBIAN-CVE-2023-43361
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
AZL-31037 CVE-2023-43361 affecting package vorbis-tools 1.4.2-6
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...