Re: CVE id request: audiofile

["Steven M. Christey" <coley () linus mitre org>]

======================================================
Name: CVE-2008-5824
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5824
Reference: MLIST:[oss-security] 20081230 CVE id request: audiofile
Reference: URL:http://openwall.com/lists/oss-security/2008/12/30/1
Reference: CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205
Reference: CONFIRM:http://musicpd.org/mantis/view.php?id=1915

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile
0.2.6 allows context-dependent attackers to cause a denial of service
(application crash) or possibly execute arbitrary code via a crafted
WAV file.