NVD

Id
70986  
Name
CVE-2004-0557  
Description
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-08-06  
Modified Date
2017-07-10  
Seq
2004-0557  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366388 70986 CVE-2004-0557 20040728 SoX buffer overflows when handling .WAV files  View
366389 70986 CVE-2004-0557 CLA-2004:855  View
366390 70986 CVE-2004-0557 FEDORA-2004-235  View
366391 70986 CVE-2004-0557 FEDORA-2004-244  View
366392 70986 CVE-2004-0557 oval:org.mitre.oval:def:9801  View
366393 70986 CVE-2004-0557 20040728 SoX buffer overflows when handling .WAV files  View
366394 70986 CVE-2004-0557 DSA-565  View
366395 70986 CVE-2004-0557 GLSA-200407-23  View
366396 70986 CVE-2004-0557 MDKSA-2004:076  View
366397 70986 CVE-2004-0557 RHSA-2004:409  View
366398 70986 CVE-2004-0557 10819  View
366399 70986 CVE-2004-0557 sox-wav-bo(16827)  View
366400 70986 CVE-2004-0557 FLSA:1945  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62951 JVNDB-2004-000293 SoX の不正な WAV ファイルの処理によるバッファオーバーフローの脆弱性 SoX には、wav.c の st_wavstartread() 関数において WAV ファイルの妥当性の確認の不備のため、複数の箇所でバッファオーバーフローを発生する脆弱性が存在します。 CVE-2004-0557 8984 CVE-2004-0557 70986 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000293.html 2004-07-28 2007-04-01 View