Published: 06/08/2004 Updated: 11/10/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 up to and including 12.17.4 allow remote malicious users to execute arbitrary code via certain WAV file header fields.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sox sox 12.17.4
conectiva linux 10.0
sox sox 12.17.2
sox sox 12.17.3
conectiva linux 8.0
conectiva linux 9.0
gentoo linux 1.4
redhat enterprise linux 3.0
redhat enterprise linux desktop 3.0
redhat fedora core core_1.0
redhat fedora core core_2.0

Synopsis sox security update Type/Severity Security Advisory: Important Topic Updated sox packages that fix buffer overflows in the WAV file handlingcode are now available Description SoX (Sound eXchange) is a sound file format converter SoX can convertbetween many different digitized sou ...

Ulf Härnhammar has reported two vulnerabilities in SoX, a universal sound sample translator, which may be exploited by malicious people to compromise a user's system with a specially crafted wav file For the stable distribution (woody) these problems have been fixed in version 12173-4woody2 For the unstable distribution (sid) these problems h ...

//--------------------------------- Begin Code: sox-exploiterc --------------------------------- /* Copyright Rosiello Security 2004 wwwrosielloorg CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there are two buffer overflows in the 'sox' and 'play' commands The ...

# POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar # Tested Under Slackware 91 # Serkan Akpolat sakpolat@gmxnet | deicide@siyahsapkaorg # Homepage: deicidesiyahsapkaorg # Greets to: Virulent # deicide@gate:~$ play britneywav # sh-205b$ # "jmp %esp" from libcso , change this if needed retJmpEsp=0x4029824B # ...

NVD-CWE-Other http://www.securityfocus.com/bid/10819 http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml http://www.redhat.com/support/errata/RHSA-2004-409.html http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html http://www.debian.org/security/2004/dsa-565 http://lwn.net/Articles/95530/http://lwn.net/Articles/95529/https://bugzilla.fedora.us/show_bug.cgi?id=1945 http://secunia.com/advisories/12175 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855 http://www.mandriva.com/security/advisories?name=MDKSA-2004:076 http://seclists.org/fulldisclosure/2004/Jul/1227.html https://exchange.xforce.ibmcloud.com/vulnerabilities/16827 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801 https://access.redhat.com/errata/RHSA-2004:409 https://nvd.nist.gov https://www.exploit-db.com/exploits/374/https://www.debian.org/security/./dsa-565

CVE-2004-0557

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect