Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1788
HistoryMay 26, 2009 - 12:00 a.m.

CVE-2009-1788

2009-05-2600:00:00
ubuntu.com
ubuntu.com
10

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.038 Low

EPSS

Percentile

91.8%

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through
1.0.19, as used in Winamp 5.552 and possibly other media programs, allows
remote attackers to cause a denial of service (application crash) and
possibly execute arbitrary code via a VOC file with an invalid header
value.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchlibsndfile< 1.0.17-4ubuntu0.8.04.2UNKNOWN
ubuntu8.10noarchlibsndfile< 1.0.17-4ubuntu0.8.10.2UNKNOWN
ubuntu9.04noarchlibsndfile< 1.0.17-4ubuntu1.1UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.038 Low

EPSS

Percentile

91.8%