CVE-2007-1544 Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) and possib...
MediumCVSS 5.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large max_samples value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| radscan network audio system | = 1.8a | No fix listed |
| debian/nas(Debian:12) | < 1.8-4 | 1.8-4 |
| debian/nas(Debian:13) | < 1.8-4 | 1.8-4 |
| debian/nas(Debian:14) | < 1.8-4 | 1.8-4 |
References
- aluigi.altervista.org exploit patch vendor-advisory
- 24527 third-party-advisory
- 24601 third-party-advisory
- 24628 third-party-advisory
- 24638 third-party-advisory
- 24980 third-party-advisory
- GLSA-200704-20 vendor-advisory
- DSA-1273 vendor-advisory
- MDKSA-2007:065 vendor-advisory
- www.radscan.com
- 20070403 FLEA-2007-0007-1: nas mailing-list
- 23017 vdb-entry
- 1017822 vdb-entry
- USN-446-1 vendor-advisory
- ADV-2007-0997 vdb-entry
- nas-procauwriteelement-dos(33051) vdb-entry
- Debian Security Tracker CVE-2007-1544 vendor-advisory
- bugs.debian.org issue-tracking