Fluid Attacks Database

Description

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	audiofile	>=0 <0.2.6-7.1	0.2.6-7.1
debian 12	audiofile	>=0 <0.2.6-7.1	0.2.6-7.1
debian 13	audiofile	>=0 <0.2.6-7.1	0.2.6-7.1
debian 14	audiofile	>=0 <0.2.6-7.1	0.2.6-7.1
rpm rhel5	audiofile	-	-
rpm rhel6	audiofile	-	-

Aliases

1. CVE-2008-58242. NVD-2008-58243. OSV-DEBIAN-2008-58244. OSV-2008-58245. SECURITY-TRACKER-CVE-2008-5824

References

1. https://www.exploit-db.com/exploits/32691

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.