CVE-2004-0557
NoneCVSS
—
EPSS
25.1%
Published
Aug 6, 2004
CISA due date
—
The record
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | sox | 0 | 12.17.4-9 |
| Debian:12 | sox | 0 | 12.17.4-9 |
| Debian:13 | sox | 0 | 12.17.4-9 |
| Debian:3.0 | sox | 0 | 12.17.3-4woody2 |
| Red Hat:enterprise_linux:3::as | sox | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::as | sox-debuginfo | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::as | sox-devel | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::desktop | sox | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::desktop | sox-debuginfo | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::desktop | sox-devel | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::es | sox | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::es | sox-debuginfo | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::es | sox-devel | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::ws | sox | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::ws | sox-debuginfo | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::ws | sox-devel | 0 | 0:12.17.4-4.3 |