Oval Definition:oval:org.mitre.oval:def:7997
Revision Date:2014-06-23Version:18
Title:DSA-1814 libsndfile -- heap-based buffer overflow
Description:Two vulnerabilities have been found in libsndfile, a library to read and write sampled audio data. The Common Vulnerabilities and Exposures project identified the following problems: Tobias Klein discovered that the VOC parsing routines suffer of a heap-based buffer overflow which can be triggered by an attacker via a crafted VOC header. The vendor discovered that the AIFF parsing routines suffer of a heap-based buffer overflow similar to CVE-2009-1788 which can be triggered by an attacker via a crafted AIFF header. In both cases the overflowing data is not completely attacker controlled but still leads to application crashes or under some circumstances might still lead to arbitrary code execution.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-1788
CVE-2009-1791
DSA-1814
Platform(s):Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s):libsndfile
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • libsndfile1 is earlier than 1.0.17-4+lenny2
  • OR libsndfile1-dev is earlier than 1.0.17-4+lenny2
  • OR sndfile-programs is earlier than 1.0.17-4+lenny2
  • OR Release section
  • Debian GNU/Linux 4.0 is installed.
  • AND Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is powerpc
  • OR Installed architecture is i386
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • libsndfile1 is earlier than 1.0.16-2+etch2
  • OR libsndfile1-dev is earlier than 1.0.16-2+etch2
  • OR sndfile-programs is earlier than 1.0.16-2+etch2
  • BACK