CVE-2008-5824

Executive Summary

Informations
Name	CVE-2008-5824	First vendor Publication	2009-01-02
Vendor	Cve	Last vendor Modification	2010-03-26

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5824

CWE : Common Weakness Enumeration

id	Name
CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

Type	Description	Count
Application	68k Audiofile cpe:/a:68k:audiofile:0.2.6	1

Open Source Vulnerability Database (OSVDB)

id	Description
51069	Audio File Library libaudiofile/modules/msadpcm.c ms_adpcm_decode_block() Fun...

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/33066
CONFIRM	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205 http://musicpd.org/mantis/view.php?id=1915
MLIST	http://openwall.com/lists/oss-security/2008/12/30/1
SECUNIA	http://secunia.com/advisories/33273
SUSE	http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
UBUNTU	http://www.ubuntu.com/usn/USN-912-1
VUPEN	http://www.vupen.com/english/advisories/2009/0005