French Security Incident Response Team

FrSIRT   

      

   français French  anglais English

 
Vulnerability Notification Service
FrSIRT Private Exploit & PoC Codes Service
FrSIRT Partner Program
14-Day Free Trial
Contact FrSIRT Sales Dept.
 

Security Advisories
Linux Security Advisories
Virus and Threats Advisories
Latest Security News
Latest Zero Day Threats
Security Vulnerabilities and Advisories Search Engine
 

Report a security incident
Report a new vulnerability
Security Mailinglist
 

Our Company
FrSIRT in the News
Advertise on FrSIRT.COM
Security Researchers and Exploit Writers Jobs
Contact Us

Mandriva Security Update Fixes Libsndfile Buffer Overflow Vulnerability


Title : Mandriva Security Update Fixes Libsndfile Buffer Overflow Vulnerability
Advisory ID : FrSIRT/ADV-2007-3322
CVE ID : CVE-2007-4974
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-10-02

Advisory Details

 
  Description
  Affected Products
  Solution
  References
Technical Description    Receive FrSIRT alerts in a Text format  Receive FrSIRT alerts in a PDF format  Receive FrSIRT alerts in an XML format  Receive FrSIRT notifications by SMS 

A vulnerability has been identified in Mandriva, which could be exploited by attackers to execute arbitrary code [...]

Solution

Upgrade the affected packages :

Mandriva Linux 2007.0:
24100ae70e6966132dd2df9c1b232888 2007.0/i586/libsndfile-progs-1.0.17-2.1mdv2007.0.i586.rpm
c5c705acb80947a1eb97755a1327e83c 2007.0/i586/libsndfile1-1.0.17-2.1mdv2007.0.i586.rpm
5958c9bb24d22926f68f7f92ee2571c9 2007.0/i586/libsndfile1-devel-1.0.17-2.1mdv2007.0.i586.rpm
71dfb4edb740b99a32667606048b055b 2007.0/i586/libsndfile1-static-devel-1.0.17-2.1mdv2007.0.i586.rpm
5f738e2181c2e32c75bc0213a8c28c0d 2007.0/SRPMS/libsndfile-1.0.17-2.1mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
0e642cd6090fe922f058b246c93efcd8 2007.0/x86_64/lib64sndfile1-1.0.17-2.1mdv2007.0.x86_64.rpm
23841c5fb2828c9205488b1c6755cbea 2007.0/x86_64/lib64sndfile1-devel-1.0.17-2.1mdv2007.0.x86_64.rpm
7836510356ed0f325ff23dbc329005a1 2007.0/x86_64/lib64sndfile1-static-devel-1.0.17-2.1mdv2007.0.x86_64.rpm
98f6ed8e57c9fd0f1f9dd377ad766813 2007.0/x86_64/libsndfile-progs-1.0.17-2.1mdv2007.0.x86_64.rpm
5f738e2181c2e32c75bc0213a8c28c0d 2007.0/SRPMS/libsndfile-1.0.17-2.1mdv2007.0.src.rpm

Mandriva Linux 2007.1:
04da55eb81107b358e3309d8dd82264b 2007.1/i586/libsndfile-progs-1.0.17-5.1mdv2007.1.i586.rpm
f26b54c27ca835daf206fbfe43f4129e 2007.1/i586/libsndfile1-1.0.17-5.1mdv2007.1.i586.rpm
2d10c1398d7fde98919a7c181fae5db3 2007.1/i586/libsndfile1-devel-1.0.17-5.1mdv2007.1.i586.rpm
58eb5002ea5e1a1a2331018addcf83fd 2007.1/i586/libsndfile1-static-devel-1.0.17-5.1mdv2007.1.i586.rpm
50e0901b2142c229a8c0564feb1bb550 2007.1/SRPMS/libsndfile-1.0.17-5.1mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
7ade2e35ca8c79740df74248fe15d83f 2007.1/x86_64/lib64sndfile1-1.0.17-5.1mdv2007.1.x86_64.rpm
0d3a26b5f9b92029d35760cee29847a4 2007.1/x86_64/lib64sndfile1-devel-1.0.17-5.1mdv2007.1.x86_64.rpm
d5dc6aae1605789598b9d7c7c4910dab 2007.1/x86_64/lib64sndfile1-static-devel-1.0.17-5.1mdv2007.1.x86_64.rpm
4476ecc80e248574f4a1af631024ddfd 2007.1/x86_64/libsndfile-progs-1.0.17-5.1mdv2007.1.x86_64.rpm
50e0901b2142c229a8c0564feb1bb550 2007.1/SRPMS/libsndfile-1.0.17-5.1mdv2007.1.src.rpm

ChangeLog

2007-10-02 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.


 
 

Search

      

Mailinglist

    
 

Microsoft XML Core Services Multiple Remote Vulnerabilities (MS08-069)

Microsoft Windows SMB Credential Reflection Vulnerability (MS08-068)

Microsoft Windows Server Service Vulnerability (MS08-067)

Microsoft Windows "afd.sys" Privilege Escalation Vulnerability (MS08-066)

Microsoft Windows MSMQ Code Execution Vulnerability (MS08-065)

Microsoft Windows VADs Privilege Escalation Vulnerability (MS08-064)

Microsoft Windows SMB Code Execution Vulnerability (MS08-063)

IBM AIX Sendmail Header Lines Denial of Service Vulnerability

IBM Metrica Multiple Parameter Cross Site Scripting Vulnerabilities

IBM Lotus Quickr Unspecified Cross Site Scripting Vulnerabilities

IBM Hardware Management Console Denial of Service Vulnerability

IBM Tivoli Storage Manager Client Buffer Overflow Vulnerability

IBM DB2 Denial of Service and Information Disclosure Vulnerabilities

IBM Lotus Quickr Denial of Service and Security Bypass Vulnerabilities

Oracle and BEA Products Multiple Code Execution Vulnerabilities

Oracle Products Multiple Code Execution and Security Bypass Issues

Oracle Products Command Execution and SQL Injection Vulnerabilities

Oracle Products Multiple Code Execution and SQL Injection Vulnerabilities

Oracle Database "PITRIG_DROPMETADATA" Buffer Overflow Vulnerability

Oracle Products Multiple Code Execution and SQL Injection Vulnerabilities

Oracle JInitiator ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities

Copyright 2003-2008 © FrSIRT.COM - Privacy Policy