CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1788

Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.086

EPSS Ranking 92.0%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2009-1788

Mega-Nerd » Libsndfile » Version: 1.0.15

cpe:2.3:a:mega-nerd:libsndfile:1.0.15
Mega-Nerd » Libsndfile » Version: 1.0.16

cpe:2.3:a:mega-nerd:libsndfile:1.0.16
Mega-Nerd » Libsndfile » Version: 1.0.17

cpe:2.3:a:mega-nerd:libsndfile:1.0.17
Mega-Nerd » Libsndfile » Version: 1.0.18

cpe:2.3:a:mega-nerd:libsndfile:1.0.18
Mega-Nerd » Libsndfile » Version: 1.0.19

cpe:2.3:a:mega-nerd:libsndfile:1.0.19
Nullsoft » Winamp » Version: 5.5

cpe:2.3:a:nullsoft:winamp:5.5
Nullsoft » Winamp » Version: 5.51

cpe:2.3:a:nullsoft:winamp:5.51
Nullsoft » Winamp » Version: 5.52

cpe:2.3:a:nullsoft:winamp:5.52
Nullsoft » Winamp » Version: 5.54

cpe:2.3:a:nullsoft:winamp:5.54
Nullsoft » Winamp » Version: 5.541

cpe:2.3:a:nullsoft:winamp:5.541
Nullsoft » Winamp » Version: 5.55

cpe:2.3:a:nullsoft:winamp:5.55
Nullsoft » Winamp » Version: 5.552

cpe:2.3:a:nullsoft:winamp:5.552

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-1788

Products

Pricing

Contact Us