CVE-2008-5824 Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a....
MediumCVSS 6.8
EPSS 6.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 68k audiofile | = 0.2.6 | No fix listed |
| debian/audiofile(Debian:12) | < 0.2.6-7.1 | 0.2.6-7.1 |
| debian/audiofile(Debian:13) | < 0.2.6-7.1 | 0.2.6-7.1 |
| debian/audiofile(Debian:14) | < 0.2.6-7.1 | 0.2.6-7.1 |
References
- Debian Security Tracker CVE-2008-5824 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org
- SUSE-SR:2009:003 vendor-advisory
- musicpd.org
- [oss-security] 20081230 CVE id request: audiofile mailing-list
- 33273 third-party-advisory
- 33066 vdb-entry
- USN-912-1 vendor-advisory
- ADV-2009-0005 vdb-entry