libsndfile / WinAmp integer overflow
Published:		04.03.2009
Source:		BUGTRAQ
SecurityVulns ID:		9708
Type:		library
Level:		5/10
Description:		Integer overflow on .CAF format parsing.

Affected:		LIBSNDFILE : libsndfile1.0
		WINAMP : Winamp 5.54
		WINAMP : Winamp 5.55
CVE:		CVE-2009-0186 (Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.)

Original document

SECUNIA, Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability (04.03.2009)

Discuss:

Read or add your comments to this news (0 comments)