Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2696
HistoryJul 21, 2011 - 12:00 a.m.

CVE-2011-2696

2011-07-2100:00:00
ubuntu.com
ubuntu.com
10

0.075 Low

EPSS

Percentile

94.1%

Integer overflow in libsndfile before 1.0.25 allows remote attackers to
cause a denial of service (application crash) or possibly execute arbitrary
code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based
buffer overflow.

Notes

Author Note
jdstrand bzr branch http://www.mega-nerd.com/Bzr/libsndfile-dev/
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlibsndfile< 1.0.21-2ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchlibsndfile< 1.0.21-2ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchlibsndfile< 1.0.23-1ubuntu0.1UNKNOWN