Published: 05/03/2009 Updated: 11/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent malicious users to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nullsoft winamp 5.541
nullsoft winamp 5.55
mega-nerd libsndfile 1.0.14
mega-nerd libsndfile 1.0.13
mega-nerd libsndfile 1.0.12
mega-nerd libsndfile 1.0.5
mega-nerd libsndfile 1.0.4
mega-nerd libsndfile 0.0.28
mega-nerd libsndfile 0.0.8
mega-nerd libsndfile 1.0.11
mega-nerd libsndfile 1.0.10
mega-nerd libsndfile 1.0.3
mega-nerd libsndfile 1.0.2
mega-nerd libsndfile
mega-nerd libsndfile 1.0.17
mega-nerd libsndfile 1.0.9
mega-nerd libsndfile 1.0.8
mega-nerd libsndfile 1.0.1
mega-nerd libsndfile 1.0.0
mega-nerd libsndfile 1.0.16
mega-nerd libsndfile 1.0.15
mega-nerd libsndfile 1.0.7
mega-nerd libsndfile 1.0.6

Debian Bug report logs - #528650 libsndfile1: Potential heap overflow in all versions <= 1019 Package: libsndfile1; Maintainer for libsndfile1 is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for libsndfile1 is src:libsndfile (PTS, buildd, popcon) Reported by: Erik de Castro Lopo <erikd@m ...

It was discovered that libsndfile did not correctly handle description chunks in CAF audio files If a user or automated system were tricked into opening a specially crafted CAF audio file, an attacker could execute arbitrary code with the privileges of the user invoking the program ...

Alan Rad Pop discovered that libsndfile, a library to read and write sampled audio data, is prone to an integer overflow This causes a heap-based buffer overflow when processing crafted CAF description chunks possibly leading to arbitrary code execution For the oldstable distribution (etch) this problem has been fixed in version 1016-2+etch1 F ...

CWE-189 http://www.securityfocus.com/bid/33963 http://secunia.com/advisories/33980 http://www.mega-nerd.com/libsndfile/NEWS http://www.vupen.com/english/advisories/2009/0585 http://secunia.com/advisories/33981 http://secunia.com/secunia_research/2009-7/http://www.vupen.com/english/advisories/2009/0584 http://secunia.com/secunia_research/2009-8/http://www.debian.org/security/2009/dsa-1742 http://secunia.com/advisories/34316 http://www.ubuntu.com/usn/USN-749-1 http://secunia.com/advisories/34526 http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html http://secunia.com/advisories/34642 http://secunia.com/advisories/34791 http://security.gentoo.org/glsa/glsa-200904-16.xml http://www.securitytracker.com/id?1021784 https://exchange.xforce.ibmcloud.com/vulnerabilities/49038 http://www.securityfocus.com/archive/1/501413/100/0/threaded http://www.securityfocus.com/archive/1/501399/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528650 https://usn.ubuntu.com/749-1/https://nvd.nist.gov

CVE-2009-0186

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect