Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string.

Specially crafted GRO files could cause a stack based buffer in audacity (CVE-2009-0490).

A vulnerability has been identified and corrected in audacity :

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string (CVE-2009-0490).

The updated packages have been patched to prevent this.

The remote host is affected by the vulnerability described in GLSA-200903-03 (Audacity: User-assisted execution of arbitrary code)

    Houssamix discovered a boundary error in the     String_parse::get_nonspace_quoted() function in     lib-src/allegro/strparse.cpp.
  Impact :

    A remote attacker could entice a user into importing a specially     crafted *.gro file, resulting in the execution of arbitrary code or a     Denial of Service.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
40190	openSUSE Security Update : audacity (audacity-523)	Nessus	SuSE Local Security Checks	high
39917	openSUSE Security Update : audacity (audacity-523)	Nessus	SuSE Local Security Checks	high
36403	Mandriva Linux Security Advisory : audacity (MDVSA-2009:055)	Nessus	Mandriva Local Security Checks	high
35793	GLSA-200903-03 : Audacity: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
35676	openSUSE 10 Security Update : audacity (audacity-5997)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2009-0490

critical

Tenable Plugins

high

high

high

high

high