CVE-2004-0557
NoneCVSS
—
EPSS
25.1%
Published
Aug 6, 2004
CISA due date
—
The record
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | sox | 0 | 12.17.4-9 |
| Debian:12 | sox | 0 | 12.17.4-9 |
| Debian:13 | sox | 0 | 12.17.4-9 |
| Debian:3.0 | sox | 0 | 12.17.3-4woody2 |
| Red Hat:enterprise_linux:3::as | sox | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::as | sox-debuginfo | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::as | sox-devel | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::desktop | sox | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::desktop | sox-debuginfo | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::desktop | sox-devel | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::es | sox | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::es | sox-debuginfo | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::es | sox-devel | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::ws | sox | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::ws | sox-debuginfo | 0 | 0:12.17.4-4.3 |
| Red Hat:enterprise_linux:3::ws | sox-devel | 0 | 0:12.17.4-4.3 |
Related vulnerabilities
- CVE-2023-26590 A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite… Also affects sox
- CVE-2023-32627 A floating point exception vulnerability was found in sox, in the read_samples function… Also affects sox
- CVE-2021-33844 A floating point exception (divide-by-zero) issue was discovered in SoX in functon… Also affects sox
- CVE-2022-31651 In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a. Also affects sox
- CVE-2022-31650 In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in… Also affects sox
- CVE-2021-40426 A heap-based buffer overflow vulnerability exists in the sphere.c start_read()… Also affects sox
- CVE-2019-8354 An issue was discovered in SoX 14.4.2. Also affects sox