CVE-2009-1788

libsndfile 1.0.15-1.0.19 - Heap-Based Buffer Overflow in VOC Header Parsing

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.

References (15)

Core 15
Core References
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:132
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1348
Patch x_refsource_confirm
http://www.mega-nerd.com/libsndfile/
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1324
Patch, Vendor Advisory x_refsource_confirm
http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50827
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35247
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2009/dsa-1814
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50541
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35076
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200905-09.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35126
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34978
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35443

Scores

EPSS 0.0823
EPSS Percentile 94.2%

Details

CWE
CWE-119
Status published
Products (12)
mega-nerd/libsndfile 1.0.15
mega-nerd/libsndfile 1.0.16
mega-nerd/libsndfile 1.0.17
mega-nerd/libsndfile 1.0.18
mega-nerd/libsndfile 1.0.19
nullsoft/winamp 5.5
nullsoft/winamp 5.51
nullsoft/winamp 5.52
nullsoft/winamp 5.54
nullsoft/winamp 5.55
... and 2 more
Published May 26, 2009
Tracked Since Feb 18, 2026