Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mega-Nerd libsndfile库VOC和AIFF文件解析多个堆溢出漏洞
Vulnerability Description
libsndfile是软件开发者Erik de Castro Lopo所研发的一个通过标准接口读写AIFF、AU和WAV等格式的音频文件的C库。 libsndfile库的src/voc.c文件中的voc_read_header()函数和src/aiff.c文件中的aiff_read_header()函数中存在多个堆溢出漏洞。如果用户使用链接到该库的应用程序打开了畸形的VOC或AIFF文件的话,就可能触发溢出,导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A