[ MDVSA-2009:055 ] audacity

[dude67]

_______________________________________________________________________

Package : audacity
Date : February 25, 2009
Affected: 2008.0, 2008.1, 2009.0, Corporate 3.0
_______________________________________________________________________

Problem Description:

A vulnerability has been identified and corrected in audacity:

Stack-based buffer overflow in the String_parse::get_nonspace_quoted
function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other
versions before 1.3.6 allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a .gro file
containing a long string (CVE-2009-0490).

The updated packages have been patched to prevent this.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-0490
_______________________________________________________________________