Bladeenc Signed Integer Memory Corruption Vulnerability
BID:6745
Info
Bladeenc Signed Integer Memory Corruption Vulnerability
| Bugtraq ID: | 6745 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 03 2003 12:00AM |
| Updated: | Feb 03 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to Auriemma Luigi <[email protected]>. |
| Vulnerable: |
Bladeenc Bladeenc 0.94.2 Bladeenc Bladeenc 0.94.1 Bladeenc Bladeenc 0.94 .0 Bladeenc Bladeenc 0.93.10 Bladeenc Bladeenc 0.92.7 |
| Not Vulnerable: | |
Exploit / POC
Bladeenc Signed Integer Memory Corruption Vulnerability
A proof of concept WAV file has been provided by Auriemma Luigi <[email protected]> and has been reported to only work on Windows 98 systems.
http://www.pivx.com/luigi/poc/blade586-942.wav
A proof of concept WAV file has been provided by Auriemma Luigi <[email protected]> and has been reported to only work on Windows 98 systems.
http://www.pivx.com/luigi/poc/blade586-942.wav
Solution / Fix
Bladeenc Signed Integer Memory Corruption Vulnerability
Solution:
It has been reported that this product is no longer being maintained by the vendor.
Gentoo Linux has released an advisory. Users who have installed media-sound/bladeenc are advised to upgrade to bladeenc-0.94.2-r1 by issuing the following commands:
emerge sync
emerge -u bladeenc
emerge clean
Solution:
It has been reported that this product is no longer being maintained by the vendor.
Gentoo Linux has released an advisory. Users who have installed media-sound/bladeenc are advised to upgrade to bladeenc-0.94.2-r1 by issuing the following commands:
emerge sync
emerge -u bladeenc
emerge clean
References
Bladeenc Signed Integer Memory Corruption Vulnerability
References:
References:
- Home Page (Bladeenc)
- Bladeenc 0.94.2 code execution (Auriemma Luigi