Friday, October 5, 2007

Ubuntu security bulletins (USN-525-1 - libsndfile vulnerabilities)

USN-525-1: libsndfile vulnerabilities
Threat-level (*): Moderate

Affected Ubuntu versions:
  • Ubuntu 6.06 LTS
  • Ubuntu 6.10
  • Ubuntu 7.04
  • (and the corresponding versions of Kubuntu, Edubuntu, and Xubuntu)
It's recommended that you perform (at least) a standard system upgrade to avoid possible:
  • Remote attacks based on wrong memory buffers handling of the libsndfile library, with the following consequences:
    • arbitrary code execution with the user privileges if a specially crafted FLAC file is executed on the attacked system

________
(*) = IMHO = It's just my opinion...

No comments:

Post a Comment