Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-2696

Опубликовано: 27 июл. 2011
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mega-nerd:libsndfile:*:*:*:*:*:*:*:*
Версия до 1.0.24 (включая)
cpe:2.3:a:mega-nerd:libsndfile:0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:0.0.28:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.0:rc6:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.13:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.14:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.18:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.19:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.20:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.21:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.22:*:*:*:*:*:*:*
cpe:2.3:a:mega-nerd:libsndfile:1.0.23:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.07038
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 14 лет назад

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.

redhat
почти 14 лет назад

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.

debian
почти 14 лет назад

Integer overflow in libsndfile before 1.0.25 allows remote attackers t ...

github
около 3 лет назад

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.

oracle-oval
почти 14 лет назад

ELSA-2011-1084: libsndfile security update (MODERATE)

EPSS

Процентиль: 91%
0.07038
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119