blob: 5ceda06d81559fb945b3797dc6f4310f0f531f02 [file] [log] [blame]
<?xml version="1.0" encoding="utf-8"?>
<glsa id="200903-03">
<title>Audacity: User-assisted execution of arbitrary code</title>
A boundary error in Audacity allows for the execution of arbitrary code.
<product type="ebuild">audacity</product>
<announced>March 06, 2009</announced>
<revised>March 06, 2009: 01</revised>
<package name="media-sound/audacity" auto="yes" arch="*">
<unaffected range="ge">1.3.6</unaffected>
<vulnerable range="lt">1.3.6</vulnerable>
Audacity is a free cross-platform audio editor.
Houssamix discovered a boundary error in the
String_parse::get_nonspace_quoted() function in
<impact type="normal">
A remote attacker could entice a user into importing a specially
crafted *.gro file, resulting in the execution of arbitrary code or a
Denial of Service.
There is no known workaround at this time.
All Audacity users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose &quot;&gt;=media-sound/audacity-1.3.6&quot;</code>
<uri link="">CVE-2009-0490</uri>
<metadata tag="requester" timestamp="Thu, 05 Mar 2009 20:19:24 +0000">
<metadata tag="submitter" timestamp="Thu, 05 Mar 2009 23:00:03 +0000">
<metadata tag="bugReady" timestamp="Fri, 06 Mar 2009 22:00:48 +0000">