Description
Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows remote attackers to execute arbitrary code via a negative offset value following a "fmt" wave chunk.
References
- bladeenc-myfseek-code-execution(11227) vdb-entry
- 6745 vdb-entry
- GLSA-200302-04 vendor-advisory
- 20030202 Bladeenc 0.94.2 code execution mailing-list
- http://www.pivx.com/luigi/adv/blade942-adv.txt