NetSight
IP …
critical9.3

CVE-2009-1791

Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote at…

Impact

Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.

Affected products

VendorProductAffected versions
Mega-NerdLibsndfile
Versions 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19
NullsoftWinamp
Versions 5.5, 5.51, 5.52, 5.54, 5.55, 5.541

Weakness classification

CWE-119

References