CVE-2011-2696

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2011-July/062955.html
• secunia.com/advisories/45125 · Vendor Advisory
• secunia.com/advisories/45351 · Vendor Advisory
• secunia.com/advisories/45384
• secunia.com/advisories/45388
• secunia.com/advisories/45433
• debian.org/security/2011/dsa-2288
• mandriva.com/security/advisories
• mega-nerd.com/libsndfile/ChangeLog
• openwall.com/lists/oss-security/2011/07/14/1
• openwall.com/lists/oss-security/2011/07/14/2
• openwall.com/lists/oss-security/2011/07/14/3
• openwall.com/lists/oss-security/2011/07/14/4
• openwall.com/lists/oss-security/2011/07/15/1

libsndfile のその他の脆弱性

• CVE-2015-7805緊急 9.3Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in …
• CVE-2009-4835中 4.3The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.2…
• CVE-2009-1791緊急 9.3Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media program…
• CVE-2009-1788緊急 9.3Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs…
• CVE-2009-0186緊急 9.3Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code vi…