CVE Vulnerabilities

CVE-2004-0557

Published: Aug 06, 2004 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.

Affected Software

Name Vendor Start Version End Version
Sox Sox 12.17.2 12.17.2
Sox Sox 12.17.3 12.17.3
Sox Sox 12.17.4 12.17.4
Linux Conectiva 8.0 8.0
Linux Conectiva 9.0 9.0
Linux Conectiva 10.0 10.0
Red Hat Enterprise Linux 3 RedHat sox-0:12.17.4-4.3 *
Sox Ubuntu dapper *
Sox Ubuntu devel *
Sox Ubuntu edgy *
Sox Ubuntu feisty *

References