Executive Summary

Informations
NameCVE-2008-5824First vendor Publication2009-01-02
VendorCveLast vendor Modification2010-03-26

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score6.8Attack RangeNetwork
Cvss Impact Score6.4Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

ImpactsProvides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5824

CWE : Common Weakness Enumeration

idName
CWE-119Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

OpenVAS Exploits

DateDescription
2010-03-22Name : Ubuntu Update for audiofile vulnerability USN-912-1
File : nvt/gb_ubuntu_USN_912_1.nasl
2009-10-13Name : SLES10: Security update for audiofile
File : nvt/sles10_audiofile.nasl
2009-10-10Name : SLES9: Security update for audiofile
File : nvt/sles9p5041620.nasl
2009-02-02Name : SuSE Security Summary SUSE-SR:2009:003
File : nvt/suse_sr_2009_003.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
51069Audio File Library libaudiofile/modules/msadpcm.c ms_adpcm_decode_block() Fun...

Nessus® Vulnerability Scanner

DateDescription
2010-03-17Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-912-1.nasl - Type : ACT_GATHER_INFO
2010-02-24Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1972.nasl - Type : ACT_GATHER_INFO
2009-09-24Name : The remote SuSE 9 host is missing a security-related patch.
File : suse9_12342.nasl - Type : ACT_GATHER_INFO
2009-09-24Name : The remote SuSE 10 host is missing a security-related patch.
File : suse_audiofile-5948.nasl - Type : ACT_GATHER_INFO
2009-07-21Name : The remote SuSE system is missing a security patch for audiofile
File : suse_11_1_audiofile-090204.nasl - Type : ACT_GATHER_INFO
2009-07-21Name : The remote SuSE system is missing a security patch for audiofile
File : suse_11_0_audiofile-090121.nasl - Type : ACT_GATHER_INFO
2009-01-28Name : The remote SuSE system is missing the security patch audiofile-5950
File : suse_audiofile-5950.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
BIDhttp://www.securityfocus.com/bid/33066
CONFIRMhttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205
http://musicpd.org/mantis/view.php?id=1915
MLISThttp://openwall.com/lists/oss-security/2008/12/30/1
SECUNIAhttp://secunia.com/advisories/33273
SUSEhttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
UBUNTUhttp://www.ubuntu.com/usn/USN-912-1
VUPENhttp://www.vupen.com/english/advisories/2009/0005

Alert History

If you want to see full details history, please login or register.
0
1
DateInformations
2014-02-17 10:47:49
  • Multiple Updates
2013-05-11 00:33:53
  • Multiple Updates