| Package | Affected versions | Patched versions |
|---|---|---|
| libsndfile | = 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19 | |
| winamp | = 5.5= 5.51= 5.52= 5.54= 5.541= 5.55= 5.552 |
Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free