Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

audiofile: arbitrary code execution

Package(s):

audiofile

CVE #(s):

CVE-2008-5824

Created:

February 2, 2009

Updated:

March 16, 2010

Description:

From the SUSE advisory:

A heap-overflow in libaudiofile was fixed. The overflow existsed in the WAV processing code and can be exploited to execute arbitrary code. (CVE-2008-5824)

Alerts:

Ubuntu	USN-912-1	2010-03-16
Debian	DSA-1972-2	2010-01-21
Debian	DSA-1972-1	2010-01-17
SuSE	SUSE-SR:2009:003	2009-02-02

(Log in to post comments)