NVD

Id
47523  
Name
CVE-2009-0186  
Description
Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-04  
Modified Date
2010-04-27  
Seq
2009-0186  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238039 47523 CVE-2009-0186 SUSE-SR:2009:008  View
238040 47523 CVE-2009-0186 GLSA-200904-16  View
238041 47523 CVE-2009-0186 DSA-1742  View
238042 47523 CVE-2009-0186 http://www.mega-nerd.com/libsndfile/NEWS  View
238043 47523 CVE-2009-0186 20090303 Secunia Research: Winamp CAF Processing Integer Overflow Vulnerability  View
238044 47523 CVE-2009-0186 20090303 Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability  View
238045 47523 CVE-2009-0186 33963  View
238046 47523 CVE-2009-0186 1021784  View
238047 47523 CVE-2009-0186 USN-749-1  View
238048 47523 CVE-2009-0186 ADV-2009-0584  View
238049 47523 CVE-2009-0186 ADV-2009-0585  View
238050 47523 CVE-2009-0186 libsndfile-caf-bo(49038)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41642 JVNDB-2009-002649 Winamp などで利用される libsndfile における整数オーバーフローの脆弱性 Winamp などで利用される libsndfile には、整数オーバーフローの脆弱性が存在します。 CVE-2009-0186 37617 CVE-2009-0186 47523 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002649.html 2009-03-05 2011-05-10 View