Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.63627
Categoría:FreeBSD Local Security Checks
Título:FreeBSD Ports: libsndfile
Resumen:The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following package is affected: libsndfile

CVE-2009-0186
Integer overflow in libsndfile 1.0.18, as used in Winamp and other
products, allows context-dependent attackers to execute arbitrary code
via crafted description chunks in a CAF audio file, leading to a
heap-based buffer overflow.

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2009-0186
BugTraq ID: 33963
http://www.securityfocus.com/bid/33963
Bugtraq: 20090303 Secunia Research: Winamp CAF Processing Integer Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/501399/100/0/threaded
Bugtraq: 20090303 Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/501413/100/0/threaded
Debian Security Information: DSA-1742 (Google Search)
http://www.debian.org/security/2009/dsa-1742
http://security.gentoo.org/glsa/glsa-200904-16.xml
http://secunia.com/secunia_research/2009-7/
http://secunia.com/secunia_research/2009-8/
http://www.securitytracker.com/id?1021784
http://secunia.com/advisories/33980
http://secunia.com/advisories/33981
http://secunia.com/advisories/34316
http://secunia.com/advisories/34526
http://secunia.com/advisories/34642
http://secunia.com/advisories/34791
SuSE Security Announcement: SUSE-SR:2009:008 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
http://www.ubuntu.com/usn/USN-749-1
http://www.vupen.com/english/advisories/2009/0584
http://www.vupen.com/english/advisories/2009/0585
XForce ISS Database: libsndfile-caf-bo(49038)
https://exchange.xforce.ibmcloud.com/vulnerabilities/49038
CopyrightCopyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.