CVEvulnerability
CVE-2009-0186
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
Affected configurations
• nullsoft winamp 5.55
• nullsoft winamp 5.541
• mega-nerd libsndfile (<= 1.0.18)
• mega-nerd libsndfile 0.0.8
• mega-nerd libsndfile 0.0.28
• mega-nerd libsndfile 1.0.0
• mega-nerd libsndfile 1.0.1
• mega-nerd libsndfile 1.0.2
• mega-nerd libsndfile 1.0.3
• mega-nerd libsndfile 1.0.4
• mega-nerd libsndfile 1.0.5
• mega-nerd libsndfile 1.0.6
• mega-nerd libsndfile 1.0.7
• mega-nerd libsndfile 1.0.8
• mega-nerd libsndfile 1.0.9
• mega-nerd libsndfile 1.0.10
• mega-nerd libsndfile 1.0.11
• mega-nerd libsndfile 1.0.12
• mega-nerd libsndfile 1.0.13
• mega-nerd libsndfile 1.0.14
• mega-nerd libsndfile 1.0.15
• mega-nerd libsndfile 1.0.16
• mega-nerd libsndfile 1.0.17
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html lists.opensuse.org
- http://secunia.com/advisories/33980 Vendor Advisory
- http://secunia.com/advisories/33981 Vendor Advisory
- http://secunia.com/advisories/34316 secunia.com
- http://secunia.com/advisories/34526 secunia.com
- http://secunia.com/advisories/34642 secunia.com
- http://secunia.com/advisories/34791 secunia.com
- http://secunia.com/secunia_research/2009-7/ Vendor Advisory
- http://secunia.com/secunia_research/2009-8/ Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200904-16.xml security.gentoo.org
- http://www.debian.org/security/2009/dsa-1742 www.debian.org
- http://www.mega-nerd.com/libsndfile/NEWS www.mega-nerd.com
- http://www.securityfocus.com/archive/1/501399/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/501413/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33963 www.securityfocus.com
- http://www.securitytracker.com/id?1021784 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-749-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2009/0584 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0585 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49038 exchange.xforce.ibmcloud.com
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html lists.opensuse.org
- http://secunia.com/advisories/33980 Vendor Advisory
- http://secunia.com/advisories/33981 Vendor Advisory
- http://secunia.com/advisories/34316 secunia.com
- http://secunia.com/advisories/34526 secunia.com
- http://secunia.com/advisories/34642 secunia.com
- http://secunia.com/advisories/34791 secunia.com
- http://secunia.com/secunia_research/2009-7/ Vendor Advisory
- http://secunia.com/secunia_research/2009-8/ Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200904-16.xml security.gentoo.org
- http://www.debian.org/security/2009/dsa-1742 www.debian.org
- http://www.mega-nerd.com/libsndfile/NEWS www.mega-nerd.com
- http://www.securityfocus.com/archive/1/501399/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/501413/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33963 www.securityfocus.com
- http://www.securitytracker.com/id?1021784 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-749-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2009/0584 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0585 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49038 exchange.xforce.ibmcloud.com