Nessus Plugin #14556

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[GLSA-200407-23] SoX: Multiple buffer overflows

Family:

Gentoo Local Security Checks

Category:

infos

Copyright:

(C) 2004 Michel Arboi

Summary:

SoX: Multiple buffer overflows

Version:

$Revision: 1.1 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

GLSA:200407-23

Description:

The remote host is affected by the vulnerability described in GLSA-200407-23
(SoX: Multiple buffer overflows)


Ulf Harnhammar discovered two buffer overflows in the sox and play commands
when handling WAV files with specially crafted header fields.

Impact

By enticing a user to play or convert a specially crafted WAV file an
attacker could execute arbitrary code with the permissions of the user
running SoX.

Workaround

There is no known workaround at this time. All users are encouraged to
upgrade to the latest available version of SoX.

References:
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1141.html


Solution:
All SoX users should upgrade to the latest version:
# emerge sync
# emerge -pv ">=media-sound/sox-12.17.4-r2"
# emerge ">=media-sound/sox-12.17.4-r2"


Risk Factor : Medium