7 results (0.002 seconds)

CVSS: 10.0EPSS: 35%CPEs: 3EXPL: 2

CVE-2015-7805 – libsndfile 1.0.25 - Local Heap Overflow

https://notcve.org/view.php?id=CVE-2015-7805

17 Nov 2015 — Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file. Desbordamiento de buffer basado en memoria dinámica en libsndfile 1.0.25 permite a atacantes remotos tener un impacto no especificado a través de un valor headindex en la cabecera en un archivo AIFF. It was discovered that libsndfile incorrectly handled memory when parsing malformed files. A remote attacker could use this issue to cause libsndfile to crash... • https://www.exploit-db.com/exploits/38447 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 7%CPEs: 29EXPL: 0

CVE-2011-2696 – libsndfile: Application crash due integer overflow by processing certain PAF audio files

https://notcve.org/view.php?id=CVE-2011-2696

27 Jul 2011 — Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow. Desbordamiento de entero en libsndfile anterior a v1.0.25 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario a través de un fichero manipulado con formato de audio PARIS (PAF), lo que provoca un... • http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062955.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-190: Integer Overflow or Wraparound •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2009-4835

https://notcve.org/view.php?id=CVE-2009-4835

05 May 2010 — The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted audio file. Las funciones (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, y (6) sds_read_header en libsndfile v1.0.20 permites a atacantes dependiendo del contexto provocar una denegación de servicio (error de div... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=530831 • CWE-189: Numeric Errors •

CVSS: 9.3EPSS: 8%CPEs: 12EXPL: 0

CVE-2009-1791

https://notcve.org/view.php?id=CVE-2009-1791

26 May 2009 — Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value. Desbordamiento de búfer basado en montículo en aiff_read_header en libsndfile desde v1.0.15 hasta v1.0.19, como se utiliza en Winamp v5.552 y posiblemente otros programas multimedia, permite a atacantes remotos pr... • http://secunia.com/advisories/35076 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 8%CPEs: 12EXPL: 1

CVE-2009-1788

https://notcve.org/view.php?id=CVE-2009-1788

26 May 2009 — Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value. Desbordamiento de búfer basado en montículo en voc_read_header en libsndfile desde v1.0.15 hasta v1.0.19, cuando se utiliza en Winamp v5.552 y posiblemente otros programas multimedia, permite a atacantes remotos prod... • http://secunia.com/advisories/35076 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.8EPSS: 5%CPEs: 25EXPL: 0

CVE-2009-0186

https://notcve.org/view.php?id=CVE-2009-0186

05 Mar 2009 — Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow. Desbordamiento de entero en libsndfile v1,0,18, usado en Winamp y otros productos, permite a atacantes dependientes de contexto la ejecución de código de su elección a través de un trozo de descripción manipulada en un archivo de audio CAF, permitiendo un desbordamiento de búfer b... • http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html • CWE-189: Numeric Errors •

CVSS: 8.8EPSS: 6%CPEs: 14EXPL: 0

CVE-2007-4974

https://notcve.org/view.php?id=CVE-2007-4974

19 Sep 2007 — Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size. Un desbordamiento de búfer en la región heap de la memoria en la función flac_buffer_copy en libsndfile versión 1.0.17 y anteriores, podría permitir a atacantes remotos ejecutar código arbitrario por medio de un archivo FLAC con datos PCM diseñados que cont... • http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •