Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows remote attackers to execute arbitrary code via a negative offset value following a "fmt" wave chunk.
References
Link | Resource |
---|---|
http://www.iss.net/security_center/static/11227.php | Vendor Advisory |
http://www.pivx.com/luigi/adv/blade942-adv.txt | Exploit Patch Vendor Advisory |
http://www.securityfocus.com/bid/6745 | Exploit Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=104428700106672&w=2 | |
http://marc.info/?l=bugtraq&m=104446346127432&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2003-02-18 21:00
Updated : 2016-10-17 19:29
NVD link : CVE-2003-0075
Mitre link : CVE-2003-0075
JSON object : View
CWE
Products Affected
bladeenc
- bladeenc