libsndfile: denial of service [LWN.net]

Package(s):

libsndfile

CVE #(s):

CVE-2009-4835

Created:

August 16, 2010

Updated:

July 29, 2011

Description:

From the Mandriva advisory:

The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted audio file.

Alerts:

openSUSE	openSUSE-SU-2011:0854-1	2011-07-29
Mandriva	MDVSA-2010:150	2010-08-14

(Log in to post comments)