A boundary error in Audacity allows for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/audacity | * | < 1.3.6 | >= 1.3.6 |
Audacity is a free cross-platform audio editor.
Houssamix discovered a boundary error in the String_parse::get_nonspace_quoted() function in lib-src/allegro/strparse.cpp.
A remote attacker could entice a user into importing a specially crafted *.gro file, resulting in the execution of arbitrary code or a Denial of Service.
There is no known workaround at this time.
All Audacity users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/audacity-1.3.6"
Audacity uses temporary files in an insecure manner, allowing for a symlink attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-sound/audacity | * | < 1.3.4-r1 | >= 1.3.4-r1 |
Audacity is a free cross-platform audio editor.
Viktor Griph reported that the "AudacityApp::OnInit()" method in file src/AudacityApp.cpp does not handle temporary files properly.
A local attacker could exploit this vulnerability to conduct symlink attacks to delete arbitrary files and directories with the privileges of the user running Audacity.
There is no known workaround at this time.
All Audacity users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-sound/audacity-1.3.4-r1"