Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-0186

Опубликовано: 05 мар. 2009
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:mega-nerd:libsndfile:*:*:*:*:*:*:*:*
Версия до 1.0.18 (включая)
cpe:2.3:a:mega-nerd:libsndfile:0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:0.0.28:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc6:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.13:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.14:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.04235
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
почти 17 лет назад

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.

redhat
почти 17 лет назад

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.

debian
почти 17 лет назад

Integer overflow in libsndfile 1.0.18, as used in Winamp and other pro ...

github
больше 3 лет назад

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.

fstec
больше 16 лет назад

Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 88%
0.04235
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-189