CVE-2008-5824

2009-01-0200:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.006

Percentile

79.1%

JSON

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6
allows context-dependent attackers to cause a denial of service
(application crash) or possibly execute arbitrary code via a crafted WAV
file.

Bugs

Notes

Author	Note
mdeslaur	PoC: http://filebin.ca/meqmyu/max_theme.wav

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchaudiofile< 0.2.6-6ubuntu1.1UNKNOWN
ubuntu8.04noarchaudiofile< 0.2.6-7ubuntu1.8.04.1UNKNOWN
ubuntu8.10noarchaudiofile< 0.2.6-7ubuntu1.8.10.1UNKNOWN
ubuntu9.04noarchaudiofile< 0.2.6-7ubuntu1.9.04.1UNKNOWN
ubuntu9.10noarchaudiofile< 0.2.6-7ubuntu2.1UNKNOWN
ubuntu6.06noarchnormalize-audio< 0.7.6-7ubuntu0.1UNKNOWN
ubuntu8.04noarchnormalize-audio< 0.7.7-2ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchnormalize-audio< 0.7.7-2ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchnormalize-audio< 0.7.7-2ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchnormalize-audio< 0.7.7-4ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	audiofile	< 0.2.6-6ubuntu1.1	UNKNOWN
ubuntu	8.04	noarch	audiofile	< 0.2.6-7ubuntu1.8.04.1	UNKNOWN
ubuntu	8.10	noarch	audiofile	< 0.2.6-7ubuntu1.8.10.1	UNKNOWN
ubuntu	9.04	noarch	audiofile	< 0.2.6-7ubuntu1.9.04.1	UNKNOWN
ubuntu	9.10	noarch	audiofile	< 0.2.6-7ubuntu2.1	UNKNOWN
ubuntu	6.06	noarch	normalize-audio	< 0.7.6-7ubuntu0.1	UNKNOWN
ubuntu	8.04	noarch	normalize-audio	< 0.7.7-2ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	normalize-audio	< 0.7.7-2ubuntu0.8.10.1	UNKNOWN
ubuntu	9.04	noarch	normalize-audio	< 0.7.7-2ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	normalize-audio	< 0.7.7-4ubuntu0.1	UNKNOWN