Audiofile 0.3.6

CPE Details

Audiofile 0.3.6
0.3.6
2020-07-08
15h22 +00:00
2020-07-08
15h22 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*

Informations

Vendor

audiofile

Product

audiofile

Version

0.3.6

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-18781 2023-08-21 22h00 +00:00 Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.
5.5
Medium
CVE-2017-6829 2017-03-20 15h00 +00:00 The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
5.5
Medium
CVE-2017-6830 2017-03-20 15h00 +00:00 Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
5.5
Medium
CVE-2017-6831 2017-03-20 15h00 +00:00 Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
5.5
Medium
CVE-2017-6832 2017-03-20 15h00 +00:00 Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
5.5
Medium
CVE-2017-6833 2017-03-20 15h00 +00:00 The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
5.5
Medium
CVE-2017-6834 2017-03-20 15h00 +00:00 Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
5.5
Medium
CVE-2017-6835 2017-03-20 15h00 +00:00 The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
5.5
Medium
CVE-2017-6836 2017-03-20 15h00 +00:00 Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.
5.5
Medium
CVE-2017-6837 2017-03-20 15h00 +00:00 WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.
5.5
Medium
CVE-2017-6838 2017-03-20 15h00 +00:00 Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
5.5
Medium
CVE-2017-6839 2017-03-20 15h00 +00:00 Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
5.5
Medium
CVE-2017-6827 2017-03-15 13h00 +00:00 Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file.
7.8
High
CVE-2017-6828 2017-03-15 13h00 +00:00 Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file.
7.8
High