Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-202310-05 Normal: VLC Media Player Vulnerability Expose

gentoo
Calendar Grey March 6, 2009
Scroller Gentoo
A buffer overflow vulnerability in Audacity enables threat actors to run unauthorized commands, creating a security concern within Debian Linux distributions.
A boundary error in Audacity allows for the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200903-03 https://security.gentoo.org/ Severity: Normal Title: Audacity: User-assisted execution of arbitrary code Date: March 06, 2009 Bugs: #253493 ID: 200903-03

Synopsis ======= A boundary error in Audacity allows for the execution of arbitrary code.
Background ========= Audacity is a free cross-platform audio editor.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-sound/audacity < 1.3.6 >= 1.3.6
========== Houssamix discovered a boundary error in the String_parse::get_nonspace_quoted() function in lib-src/allegro/strparse.cpp.
Impact ===== A remote attacker could entice a user into importing a specially crafted ...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround