CVE-2009-1791 - CVE House
Back to Database
Status published Critical CVE-2009-1791

Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19,...

Vulnerability Description

Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-1791

Credits & Attribution

No credits recorded in the NVD database.

References

More from mega-nerd

View All →
CVE-2011-2696
Integer overflow in libsndfile before 1.0.25 allows remote attackers to...
Medium 6.8
CVE-2009-4835
The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5)...
Medium 4.3
CVE-2009-1788
Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19,...
Critical 9.3
CVE-2008-5008
Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC...
Critical 9.3
CVE-2007-4974
Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17...
High 7.5

Affected Vendor

Affected Software

libsndfile, winamp
Vulnerable Versions:
1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 5.5, 5.51, 5.52, 5.54, 5.55, 5.541, 5.552

Timeline

Official Publish: May 26th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.