CVE-2009-1791: Buffer Overflow
Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1791?
CVE-2009-1791 has a high severity level due to its potential to cause application crashes and possibly enable arbitrary code execution.
How do I fix CVE-2009-1791?
To fix CVE-2009-1791, update libsndfile to version 1.0.20 or later.
Which software is affected by CVE-2009-1791?
CVE-2009-1791 affects versions 1.0.15 to 1.0.19 of libsndfile and Winamp versions up to 5.552.
What kind of attack can be launched using CVE-2009-1791?
An attacker can exploit CVE-2009-1791 by sending a specially crafted AIFF file that triggers a heap-based buffer overflow.
Is CVE-2009-1791 a remote code execution vulnerability?
Yes, CVE-2009-1791 potentially allows remote code execution under certain conditions.