NVD

Id
35354  
Name
CVE-2014-8145  
Description
Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-31  
Modified Date
2016-10-25  
Seq
2014-8145  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181166 35354 CVE-2014-8145 http://advisories.mageia.org/MGASA-2014-0561.html  View
181167 35354 CVE-2014-8145 http://packetstormsecurity.com/files/129699/SoX-14.4.1-Heap-Buffer-Overflow.html  View
181168 35354 CVE-2014-8145 MDVSA-2015:015  View
181169 35354 CVE-2014-8145 http://www.ocert.org/advisories/ocert-2014-010.html  View
181170 35354 CVE-2014-8145 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
181171 35354 CVE-2014-8145 71774  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18585 JVNDB-2014-007460 Sound eXchange におけるヒープベースのバッファオーバーフローの脆弱性 Sound eXchange (SoX) には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-8145 75438 CVE-2014-8145 35354 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007460.html 2014-12-22 2015-06-08 View