Total vulnerabilities in the database
Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.
| Software | From | Fixed in |
|---|---|---|
| nullsoft / winamp | 5.552 | 5.552.x |
| mega-nerd / libsndfile | 1.0.18 | 1.0.18.x |
| mega-nerd / libsndfile | 1.0.19 | 1.0.19.x |
| mega-nerd / libsndfile | 1.0.15 | 1.0.15.x |
| nullsoft / winamp | 5.54 | 5.54.x |
| nullsoft / winamp | 5.5 | 5.5.x |
| mega-nerd / libsndfile | 1.0.17 | 1.0.17.x |
| nullsoft / winamp | 5.55 | 5.55.x |
| nullsoft / winamp | 5.51 | 5.51.x |
| nullsoft / winamp | 5.541 | 5.541.x |
| nullsoft / winamp | 5.52 | 5.52.x |
| mega-nerd / libsndfile | 1.0.16 | 1.0.16.x |