CVE-2004-0557
Fixed in a distro release EPSS 25%
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
Products: sox, conectiva linux, gentoo linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sox | 12.17.4-9 |
| Debian 13 | sox | 12.17.4-9 |
| Debian 3.0 | sox | 12.17.3-4woody2 |
| Red Hat Enterprise Linux 3 | sox | 0:12.17.4-4.3 |
| Red Hat Enterprise Linux 3 | sox-debuginfo | 0:12.17.4-4.3 |
| Red Hat Enterprise Linux 3 | sox-devel | 0:12.17.4-4.3 |