OSVDB ID: 51070

Title: Audacity lib-src/allegro/strparse.cpp String_parse::get_nonspace_quoted() Function Crafted GRO File Handling Overflow

Info

Disclosure

Jan 01, 2009

Discovery

Unknown

Dates

Exploit

Jan 01, 2009

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: Vendor Verified, Uncoordinated Disclosure

Solution

Products

Unknown or Incomplete

References

Exploit Database: 10322 7634 9501
CVE ID: 2009-0490 (see also: NVD)
Bugtraq ID: 33090
Secunia Advisory ID: 33356 33849 34172
Milw0rm: 7634 9501
VUPEN Advisory: ADV-2009-0008
Vendor Specific News/Changelog Entry: http://bugs.gentoo.org/show_bug.cgi?id=253493
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
Other Advisory URL: http://n2.nabble.com/Audacity-%22String_parse::get_nonspace_quoted()%22-Buffer-Overflow-td2139537.html
Vendor Specific Advisory URL: http://www.gentoo.org/security/en/glsa/glsa-200903-03.xml

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/51070