Summary
Agostino Sarubbo discovered that audiofile incorrectly handled certain
malformed audio files. If a user or automated system were tricked into
processing a specially crafted audio file, a remote attacker could cause
applications linked against audiofile to crash, leading to a denial of
service, or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | audiofile | 0.3.6-2ubuntu0.14.04.2 |
Vulnerabilities 13
-
Unscored —
Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofil…
-
Unscored —
Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Li…
-
Unscored —
The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a den…
-
Unscored —
Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allo…
-
Unscored —
Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.…
-
Unscored —
Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4,…
-
Unscored —
The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote a…
-
Unscored —
Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3…
-
Unscored —
The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote at…
-
Unscored —
Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File L…
-
Unscored —
WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via v…
-
Unscored —
Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause…
-
Unscored —
Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a …
References
-
report
https://ubuntu.com/security/CVE-2017-6827
-
report
https://ubuntu.com/security/CVE-2017-6828
-
report
https://ubuntu.com/security/CVE-2017-6829
-
report
https://ubuntu.com/security/CVE-2017-6830
-
report
https://ubuntu.com/security/CVE-2017-6831
-
report
https://ubuntu.com/security/CVE-2017-6832
-
report
https://ubuntu.com/security/CVE-2017-6833
-
report
https://ubuntu.com/security/CVE-2017-6834
-
report
https://ubuntu.com/security/CVE-2017-6835
-
report
https://ubuntu.com/security/CVE-2017-6836
-
report
https://ubuntu.com/security/CVE-2017-6837
-
report
https://ubuntu.com/security/CVE-2017-6838
-
report
https://ubuntu.com/security/CVE-2017-6839