Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-1788

Опубликовано: 26 мая 2009
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.18:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.19:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*

EPSS

Процентиль: 92%
0.0857
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 16 лет назад

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.

redhat
больше 16 лет назад

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.

debian
больше 16 лет назад

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 thr ...

github
почти 4 года назад

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.

fstec
больше 16 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 92%
0.0857
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119