Published: 19/09/2007 Updated: 18/10/2011

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and previous versions might allow remote malicious users to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mega-nerd libsndfile 1.0.10
mega-nerd libsndfile 1.0.12
mega-nerd libsndfile 1.0.14
mega-nerd libsndfile 1.0.16
mega-nerd libsndfile 0.0.8
mega-nerd libsndfile 0.0.28
mega-nerd libsndfile 1.0.0
mega-nerd libsndfile 1.0.1
mega-nerd libsndfile 1.0.11
mega-nerd libsndfile 1.0.13
mega-nerd libsndfile 1.0.15
mega-nerd libsndfile

Debian Bug report logs - #443386 CVE-2007-4974 heap overflow via crafted PCM data Package: libsndfile; Maintainer for libsndfile is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Nico Golde <nion@debianorg> Date: Thu, 20 Sep 2007 23:09:01 UTC Severity: grave Tags: security Found in ...

Robert Buchholz discovered that libsndfile did not correctly validate the size of its memory buffers If a user were tricked into playing a specially crafted FLAC file, a remote attacker could execute arbitrary code with user privileges ...

Rubert Buchholz discovered that libsndfile, a library for reading / writing audio files, performs insufficient boundary checks when processing FLAC files, which might lead to the execution of arbitrary code The old stable distribution (sarge) is not affected by this problem For the stable distribution (etch), this problem has been fixed in ve ...

CWE-119 https://bugs.gentoo.org/show_bug.cgi?id=192834 https://bugzilla.redhat.com/show_bug.cgi?id=296221 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00344.html http://security.gentoo.org/glsa/glsa-200710-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:191 http://www.ubuntu.com/usn/usn-525-1 http://www.securityfocus.com/bid/25758 http://secunia.com/advisories/26932 http://secunia.com/advisories/26921 http://secunia.com/advisories/27018 http://secunia.com/advisories/27100 http://secunia.com/advisories/27071 http://www.debian.org/security/2007/dsa-1442 http://secunia.com/advisories/28265 http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html http://secunia.com/advisories/28412 http://www.vupen.com/english/advisories/2007/3241 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443386 https://usn.ubuntu.com/525-1/https://nvd.nist.gov

CVE-2007-4974

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect