CVE-2004-0557: Buffer Overflow
Published Aug 2, 2004
·Updated
Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
Affected Software
13 affected components
SoX SoX=12.17.2
SoX SoX=12.17.3
SoX SoX=12.17.4
Conectiva Linux=8.0
Conectiva Linux=9.0
Conectiva Linux=10.0
Gentoo Linux=1.4
redhat Enterprise Linux=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux Desktop=3.0
redhat Fedora Core=core_1.0
redhat Fedora Core=core_2.0
Remediation
Patch Available
Patch Available
Event History
Aug 2, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0557?
CVE-2004-0557 has a high severity rating due to the potential for remote code execution through exploited buffer overflows.
2
How do I fix CVE-2004-0557?
To fix CVE-2004-0557, update to the latest version of SoX or apply patches provided by your Linux distribution.
3
Which versions of SoX are affected by CVE-2004-0557?
CVE-2004-0557 affects SoX versions 12.17.2 to 12.17.4.
4
What systems are impacted by CVE-2004-0557?
CVE-2004-0557 impacts several Linux distributions including Conectiva, Red Hat, and Gentoo.
5
What kind of vulnerability is CVE-2004-0557?
CVE-2004-0557 is a vulnerability related to multiple buffer overflows in the st_wavstartread function.