ID:3711 - Exploit for Heap-based buffer overflow in libsndfile - CVE-2015-7805

 
Main Vulnerability Database Exploits ID:3711 - Exploit for Heap-based buffer overflow in libsndfile - CVE-2015-7805

ID:3711 - Exploit for Heap-based buffer overflow in libsndfile - CVE-2015-7805

Published: August 4, 2020


Vulnerability identifier: #VU33282
Vulnerability risk: High
CVE-ID: CVE-2015-7805
CWE-ID: CWE-122
Exploitation vector: Remote access
Vulnerable software:
libsndfile

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Heap-based buffer overflow in libsndfile 1.0.25. A remote attacker can use the headindex value in the header in an AIFF file. to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Update to version 1.0.26.