CVE-2009-1791
Published May 26, 2009
Last updated 7 years ago
Overview
- Description
- Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mega-nerd:libsndfile:1.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "570D85F0-F757-488A-A059-54BF0810F1E0"
},
{
"criteria": "cpe:2.3:a:mega-nerd:libsndfile:1.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E28BC682-E6B1-4A63-9734-FDB6019B9AE0"
},
{
"criteria": "cpe:2.3:a:mega-nerd:libsndfile:1.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8823A84B-4694-4838-A877-AE66400B26BD"
},
{
"criteria": "cpe:2.3:a:mega-nerd:libsndfile:1.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4C2B0D1-AE8A-4978-85B0-C5E0ABE89E79"
},
{
"criteria": "cpe:2.3:a:mega-nerd:libsndfile:1.0.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "759BBF60-8964-4590-A5EB-F21EB4049E39"
},
{
"criteria": "cpe:2.3:a:nullsoft:winamp:5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E02CCF2-2335-4F08-8061-6CFD7C8B265A"
},
{
"criteria": "cpe:2.3:a:nullsoft:winamp:5.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FEE5A4C-770A-458B-AC1A-8F1F99A0951A"
},
{
"criteria": "cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B58E9493-556E-4085-B337-AE211A28DA6C"
},
{
"criteria": "cpe:2.3:a:nullsoft:winamp:5.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C6E95D5-D855-4CD4-B44B-66FF029EC823"
},
{
"criteria": "cpe:2.3:a:nullsoft:winamp:5.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "218E9850-70F5-4579-9549-47DD16ECD2B3"
},
{
"criteria": "cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "951898A7-A060-4853-8C4E-99927794C0FC"
},
{
"criteria": "cpe:2.3:a:nullsoft:winamp:5.552:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DA20F35-AC57-4B5B-9EF1-8A4393BD1B33"
}
],
"operator": "OR"
}
]
}
]