CVE-2004-0557

Published: Aug 6, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.

Affected (13)

Products: Conectiva: Linux · Sox: Sox · Gentoo: Linux · +1 more

Show all products

Conectiva: Linux · Sox: Sox · Gentoo: Linux · Redhat: Enterprise Linux, Enterprise Linux Desktop, Fedora Core

1 product

1 product

1 product

3 products

Enterprise Linux

Enterprise Linux Desktop

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Conectiva Linux	Version 10.0
Conectiva Linux	Version 8.0
Conectiva Linux	Version 9.0
Sox Sox	Version 12.17.2
Sox Sox	Version 12.17.3
Sox Sox	Version 12.17.4

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Gentoo Linux	Version 1.4
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Fedora Core	Version core_1.0
Redhat Fedora Core	Version core_2.0

References (28)

http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855

Source: cve@mitre.org

http://lwn.net/Articles/95529/

Source: cve@mitre.org

http://lwn.net/Articles/95530/

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2004/Jul/1227.html

Source: cve@mitre.org

http://secunia.com/advisories/12175

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-565

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml

Source: cve@mitre.org

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2004:076

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-409.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/10819

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://bugzilla.fedora.us/show_bug.cgi?id=1945

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16827

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855

Source: af854a3a-2127-422b-91ae-364da2661108

http://lwn.net/Articles/95529/

Source: af854a3a-2127-422b-91ae-364da2661108

http://lwn.net/Articles/95530/

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2004/Jul/1227.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/12175

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2004/dsa-565

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2004:076

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-409.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/10819

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://bugzilla.fedora.us/show_bug.cgi?id=1945

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/16827

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.