Summary
Fabrizio Gennari discovered that audiofile incorrectly handled changing
both the sample format and the number of channels. If a user or automated
system were tricked into processing a specially crafted file, audiofile
could be made to crash, leading to a denial of service, or possibly execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | audiofile | 0.3.6-2ubuntu0.14.04.1 |
Vulnerabilities 1
-
Unscored —
Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assiste…
References
-
report
https://ubuntu.com/security/CVE-2015-7747