CVE-2009-1788

CVE-2009-1788

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 8.2%
exploitation probability
8.2%top 5% of all CVEs
observed exploitation
nono source reports it
Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.
Affected products
n/a · n/a
References
http://secunia.com/advisories/35076http://secunia.com/advisories/35126http://secunia.com/advisories/35247http://secunia.com/advisories/35443http://security.gentoo.org/glsa/glsa-200905-09.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/50541https://exchange.xforce.ibmcloud.com/vulnerabilities/50827http://trapkit.de/advisories/TKADV2009-006.txthttp://www.debian.org/security/2009/dsa-1814http://www.mandriva.com/security/advisories?name=MDVSA-2009:132http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/http://www.mega-nerd.com/libsndfile/