FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-0186

This CVE name corresponds to:

Entered	Topic
2009-03-16	libsndfile -- CAF processing integer overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-0186 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-0186
Phase	Assigned(20090120)

Description

Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.

References

Source	Reference
BUGTRAQ	20090303 Secunia Research: Winamp CAF Processing Integer Overflow Vulnerability
BUGTRAQ	20090303 Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability
MISC	http://secunia.com/secunia_research/2009-7/
MISC	http://secunia.com/secunia_research/2009-8/
CONFIRM	http://www.mega-nerd.com/libsndfile/NEWS
DEBIAN	DSA-1742
GENTOO	GLSA-200904-16
SUSE	SUSE-SR:2009:008
UBUNTU	USN-749-1
BID	33963
SECTRACK	1021784
SECUNIA	33980
SECUNIA	33981
SECUNIA	34316
SECUNIA	34526
SECUNIA	34642
SECUNIA	34791
VUPEN	ADV-2009-0584
VUPEN	ADV-2009-0585
XF	libsndfile-caf-bo(49038)