CVE-2004-0557 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2004-0557
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0557

Description: Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/16827 VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html SAID Secunia Advisory: SA12175 REDHAT http://www.redhat.com/support/errata/RHSA-2004-409.html MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:076 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml FULLDISC http://seclists.org/lists/fulldisclosure/2004/Jul/1229.html FEDORA http://lwn.net/Articles/95529/ http://lwn.net/Articles/95530/ DEBIAN http://www.debian.org/security/2004/dsa-565 CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855 BID 10819

Return to the previous page.