[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.51.0901071327190.15738@faron.mitre.org>
Date: Wed, 7 Jan 2009 13:27:23 -0500 (EST)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE id request: audiofile
======================================================
Name: CVE-2008-5824
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5824
Reference: MLIST:[oss-security] 20081230 CVE id request: audiofile
Reference: URL:http://openwall.com/lists/oss-security/2008/12/30/1
Reference: CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205
Reference: CONFIRM:http://musicpd.org/mantis/view.php?id=1915
Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile
0.2.6 allows context-dependent attackers to cause a denial of service
(application crash) or possibly execute arbitrary code via a crafted
WAV file.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
