SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2015-7805

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

EXPLOIT-DB-38447

BID-77427

FEDORA-2015-0f405832d3

FEDORA-2015-56be43eae6

FEDORA-2015-5afed1aad2

GLSA-201612-03

USN-2832-1

http://www.openwall.com/lists/oss-security/2015/11/03/3

http://www.openwall.com/lists/oss-security/2015/11/03/7

http://packetstormsecurity.com/files/133926/libsndfile-1.0.25-Heap-Overflow.html

http://www.nemux.org/2015/10/13/libsndfile-1-0-25-heap-overflow/

openSUSE-SU-2015:1995

openSUSE-SU-2015:2119


30479



423868



248149



909



194803



282