Signature Detail
Short Name |
APP:AUDACITY-AUP-BO |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Audacity '.aup' Project File Parsing Buffer Overflow |
Release Date |
2012/12/06 |
Update Number |
2208 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Audacity .aup Project File Parsing Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Audacity. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
Audacity is prone a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts likely result in denial-of-service conditions. NOTE (August 25, 2009): This BID had wrongly referred to Audacity 1.6.2, but now correctly refers to the affected version: Audacity 1.2.6. Audacity 1.2.6 is vulnerable; other versions may also be affected.
Affected Products
- Audacity 1.2.6
References
- BugTraq: 33160