CVE-2004-0557

{"id": "CVE-2004-0557", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-08-06T04:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html", "source": "cve@mitre.org"}, {"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855", "source": "cve@mitre.org"}, {"url": "http://lwn.net/Articles/95529/", "source": "cve@mitre.org"}, {"url": "http://lwn.net/Articles/95530/", "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2004/Jul/1227.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/12175", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2004/dsa-565", "source": "cve@mitre.org"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:076", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-409.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10819", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.fedora.us/show_bug.cgi?id=1945", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16827", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lwn.net/Articles/95529/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lwn.net/Articles/95530/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2004/Jul/1227.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/12175", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2004/dsa-565", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:076", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-409.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10819", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.fedora.us/show_bug.cgi?id=1945", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16827", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en Sound eXchange (SoX) anteriores a 12.17 permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante ciertos campos de cabecera de ficheros WAV."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sox:sox:12.17.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D8C8486-8397-4B6E-967F-B2AD831B0628"}, {"criteria": "cpe:2.3:a:sox:sox:12.17.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D47BE660-68EE-44CD-9F30-5D7CA16795D9"}, {"criteria": "cpe:2.3:a:sox:sox:12.17.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2015121-6291-4BB4-AE99-08222A5346F7"}, {"criteria": "cpe:2.3:o:conectiva:linux:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD14661C-E3BE-44DF-BC8D-294322BF23EA"}, {"criteria": "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4007B0D-9606-46BD-866A-7911BEA292BE"}, {"criteria": "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81B543F9-C209-46C2-B0AE-E14818A6992E"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC79FF22-2664-4C40-B0B3-6D23B5F45162"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB89C970-DE94-4E09-A90A-077DB83AD156"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"}, {"criteria": "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C84296C-2C8A-4DCD-9751-52951F8BEA9F"}, {"criteria": "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6996B14-925B-46B8-982F-3545328B506B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}