CVE-2007-1546: Medium severity Mandrakesoft Mandrake Linux vulnerability

Published Mar 20, 2007

Updated

Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via (1) large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or (2) a large inputNum parameter to the compileInputs function in server/dia/auutil.c.

Affected Software

3 affected components

Mandrakesoft Mandrake Linux=2007

Radscan Network Audio System=1.8a

Remediation

Patch Available

http://aluigi.altervista.org/adv/nasbugs-adv.txt

Event History

Mar 20, 2007

CVE Published

10:19 PM

Data Sourced

10:19 PM

DescriptionWeaknessAffected Software

Mar 21, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1546?

CVE-2007-1546 has a severity rating that indicates it can lead to a denial of service due to an array index error.

How do I fix CVE-2007-1546?

To fix CVE-2007-1546, update to the latest version of the Network Audio System that is not affected by this vulnerability.

What types of attacks are possible with CVE-2007-1546?

CVE-2007-1546 may allow remote attackers to cause a denial of service through specific input values.

Which software is affected by CVE-2007-1546?

CVE-2007-1546 affects the Network Audio System version 1.8a.

What can be the impact of CVE-2007-1546 on my system?

The impact of CVE-2007-1546 on a system can result in unexpected crashes leading to service downtime.