Published: 10/02/2009 Updated: 07/11/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 945

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions prior to 1.3.6 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string.

Vulnerable Product	Search on Vulmon	Subscribe to Product
audacityteam audacity

#exploitpy # Audacity 126 (gro File) Buffer overflow Exploit # By: Encrypt3dM!nd # m1nd3dwordpresscom/ ##################################################### # i know this exploit already been posted, but the author # used an address as an universal,well,it's universal but # it can't be called to jumpbecause it cause privileged_ # ...

#!/usr/bin/env python # # Audacity <= 12 gro universal buffer overflow exploit # Author: mr_me # Download: audacitysourceforgenet/download/ # Tested on Wind0ws XP sp3 & Vist@ # # Greetz fly to Muts and the offensive-security team # also to my wonderful partner Vanessa F for putting up with me :P # wwwoffensive-securitycom ...

# ----------------------------------------------------------- # Author : Houssamix # ----------------------------------------------------------- # Audacity 126 (gro file ) Local buffer overflow POC # download : audacitysourceforgenet/ # AudacityÂ® is free, open source software for recording and editing sounds # Description: # Wh ...

CWE-787 http://bugs.gentoo.org/show_bug.cgi?id=253493 http://www.securityfocus.com/bid/33090 http://secunia.com/advisories/33356 http://osvdb.org/51070 http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://www.vupen.com/english/advisories/2009/0008 https://www.exploit-db.com/exploits/7634 http://n2.nabble.com/Audacity-%22String_parse::get_nonspace_quoted%28%29%22-Buffer-Overflow-td2139537.html https://nvd.nist.gov https://www.exploit-db.com/exploits/10322/

CVE-2009-0490

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect