libsndfile CAF Processing Buffer Overflow Vulnerability

Bugtraq ID:	33963
Class:	Boundary Condition Error
CVE:	CVE-2009-0186
Remote:	Yes
Local:	No
Published:	Mar 03 2009 12:00AM
Updated:	Apr 13 2015 10:05PM
Credit:	Alin Rad Pop, Secunia Research
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 11 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 10 Sun Solaris 11 Express S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Pardus Linux 2008 0 NullSoft Winamp 5.55 NullSoft Winamp 5.541 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 libsndfile libsndfile 1.0.18 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	libsndfile libsndfile 1.0.19

libsndfile CAF Processing Buffer Overflow Vulnerability

The 'libsndfile' library is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code in the context of an application using the library. This can compromise the affected application and possibly the underlying computer. Failed attacks will likely cause denial-of-service conditions.

This issue affects libsndfile 1.0.18; previous versions may also be vulnerable.

libsndfile CAF Processing Buffer Overflow Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.

libsndfile CAF Processing Buffer Overflow Vulnerability

Solution:
An update is available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.7.10.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.17-4ubuntu0.7.10.1_powerpc.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.7.10.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.17-4ubuntu0.7.10.1_powerpc.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.7.10.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.17-4ubuntu0.7.10.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1-dev_1.0. 17-4ubuntu0.8.04.1_powerpc.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1_1.0.17-4 ubuntu0.8.04.1_powerpc.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/libs/libsndfile/sndfile-programs _1.0.17-4ubuntu0.8.04.1_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1-dev_1.0. 17-4ubuntu0.8.10.1_powerpc.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1_1.0.17-4 ubuntu0.8.10.1_powerpc.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/libs/libsndfile/sndfile-programs _1.0.17-4ubuntu0.8.10.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1-dev_1.0. 17-4ubuntu0.8.04.1_sparc.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1_1.0.17-4 ubuntu0.8.04.1_sparc.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.04.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/libs/libsndfile/sndfile-programs _1.0.17-4ubuntu0.8.04.1_sparc.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu libsndfile1-dev_1.0.12-3ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.12-3ubuntu1.1_sparc.deb


• Ubuntu libsndfile1_1.0.12-3ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.12-3ubuntu1.1_sparc.deb


• Ubuntu sndfile-programs_1.0.12-3ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.12-3ubuntu1.1_sparc.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva lib64sndfile-devel-1.0.18-0.pre11.7.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64sndfile-static-devel-1.0.18-0.pre11.7.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64sndfile1-1.0.18-0.pre11.7.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-progs-1.0.18-0.pre11.7.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.17-4ubuntu0.8.04.1_amd64.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.17-4ubuntu0.8.04.1_amd64.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.17-4ubuntu0.8.04.1_amd64.deb

Mandriva Linux Mandrake 2008.0

• Mandriva libsndfile-devel-1.0.18-0.pre11.7.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-progs-1.0.18-0.pre11.7.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-static-devel-1.0.18-0.pre11.7.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile1-1.0.18-0.pre11.7.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.7.10.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.17-4ubuntu0.7.10.1_sparc.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.7.10.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.17-4ubuntu0.7.10.1_sparc.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.7.10.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.17-4ubuntu0.7.10.1_sparc.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1-dev_1.0. 17-4ubuntu0.8.10.1_sparc.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1_1.0.17-4 ubuntu0.8.10.1_sparc.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/libs/libsndfile/sndfile-programs _1.0.17-4ubuntu0.8.10.1_sparc.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64sndfile-devel-1.0.18-2.pre22.1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64sndfile-static-devel-1.0.18-2.pre22.1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64sndfile1-1.0.18-2.pre22.1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-progs-1.0.18-2.pre22.1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.17-4ubuntu0.8.10.1_amd64.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.17-4ubuntu0.8.10.1_amd64.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.17-4ubuntu0.8.10.1_amd64.deb

Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva lib64sndfile-devel-1.0.18-1.pre20.1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64sndfile-static-devel-1.0.18-1.pre20.1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64sndfile1-1.0.18-1.pre20.1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-progs-1.0.18-1.pre20.1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.1

• Mandriva libsndfile-devel-1.0.18-1.pre20.1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-progs-1.0.18-1.pre20.1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-static-devel-1.0.18-1.pre20.1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile1-1.0.18-1.pre20.1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.17-4ubuntu0.8.10.1_i386.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.17-4ubuntu0.8.10.1_i386.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.17-4ubuntu0.8.10.1_i386.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu libsndfile1-dev_1.0.12-3ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.12-3ubuntu1.1_powerpc.deb


• Ubuntu libsndfile1_1.0.12-3ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.12-3ubuntu1.1_powerpc.deb


• Ubuntu sndfile-programs_1.0.12-3ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.12-3ubuntu1.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1-dev_1.0. 17-4ubuntu0.8.04.1_lpia.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1_1.0.17-4 ubuntu0.8.04.1_lpia.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.04.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/libs/libsndfile/sndfile-programs _1.0.17-4ubuntu0.8.04.1_lpia.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.7.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1-dev_1.0. 17-4ubuntu0.7.10.1_lpia.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.7.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1_1.0.17-4 ubuntu0.7.10.1_lpia.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.7.10.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/libs/libsndfile/sndfile-programs _1.0.17-4ubuntu0.7.10.1_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu libsndfile1-dev_1.0.12-3ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.12-3ubuntu1.1_i386.deb


• Ubuntu libsndfile1_1.0.12-3ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.12-3ubuntu1.1_i386.deb


• Ubuntu sndfile-programs_1.0.12-3ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.12-3ubuntu1.1_i386.deb

Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.7.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.17-4ubuntu0.7.10.1_i386.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.7.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.17-4ubuntu0.7.10.1_i386.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.7.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.17-4ubuntu0.7.10.1_i386.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1-dev_1.0. 17-4ubuntu0.8.10.1_lpia.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libs/libsndfile/libsndfile1_1.0.17-4 ubuntu0.8.10.1_lpia.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.10.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/libs/libsndfile/sndfile-programs _1.0.17-4ubuntu0.8.10.1_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu libsndfile1-dev_1.0.12-3ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.12-3ubuntu1.1_amd64.deb


• Ubuntu libsndfile1_1.0.12-3ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.12-3ubuntu1.1_amd64.deb


• Ubuntu sndfile-programs_1.0.12-3ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.12-3ubuntu1.1_amd64.deb

Mandriva Linux Mandrake 2009.0

• Mandriva libsndfile-devel-1.0.18-2.pre22.1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-progs-1.0.18-2.pre22.1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile-static-devel-1.0.18-2.pre22.1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsndfile1-1.0.18-2.pre22.1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.7.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.17-4ubuntu0.7.10.1_amd64.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.7.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.17-4ubuntu0.7.10.1_amd64.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.7.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.17-4ubuntu0.7.10.1_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu libsndfile1-dev_1.0.17-4ubuntu0.8.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1-dev_1.0.17-4ubuntu0.8.04.1_i386.deb


• Ubuntu libsndfile1_1.0.17-4ubuntu0.8.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libs/libsndfile/libsndfile 1_1.0.17-4ubuntu0.8.04.1_i386.deb


• Ubuntu sndfile-programs_1.0.17-4ubuntu0.8.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/libs/libsndfile/sndfil e-programs_1.0.17-4ubuntu0.8.04.1_i386.deb

libsndfile CAF Processing Buffer Overflow Vulnerability

References:

• libsndfile ChangeLog (libsndfile)
  
• libsndfile Homepage (libsndfile)
  
• Multiple Vulnerabilities in libsndfile (Oracle)
  
• Winamp Homepage (Nullsoft)
  
• Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability (Secunia Research )
  
• Secunia Research: Winamp CAF Processing Integer Overflow Vulnerability (Secunia Research )
  
• Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability (Secunia Research)
  
• Secunia Research: Winamp CAF Processing Integer Overflow Vulnerability (Secunia Research)