header-logo
Suggest Exploit
vendor:
libaudiofile
by:
SecurityFocus
7.5
CVSS
HIGH
Heap-Based Buffer Overflow
122
CWE
Product Name: libaudiofile
Affected Version From: 2000.2.6
Affected Version To: 2000.2.6
Patch Exists: Yes
Related CWE: N/A
CPE: libaudiofile
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

Audio File Library Heap-Based Buffer Overflow Vulnerability

Audio File Library ('libaudiofile') is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary machine code in the context of applications using the vulnerable library. Failed exploit attempts will likely cause denial-of-service conditions.

Mitigation:

Upgrade to the latest version of libaudiofile
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/33066/info

Audio File Library ('libaudiofile') is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data.

An attacker can exploit this issue to execute arbitrary machine code in the context of applications using the vulnerable library. Failed exploit attempts will likely cause denial-of-service conditions.

This issue affects libaudiofile 0.2.6; other versions may also be vulnerable. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32691.wav