CVE-2004-0557

Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.

• http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855
• http://lwn.net/Articles/95529/
• http://lwn.net/Articles/95530/
• http://seclists.org/fulldisclosure/2004/Jul/1227.html
• http://secunia.com/advisories/12175
• http://www.debian.org/security/2004/dsa-565
• http://www.gentoo.org/security/en/glsa/glsa-200407-23.xmlVendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:076
• http://www.redhat.com/support/errata/RHSA-2004-409.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/10819Exploit, Patch, Vendor Advisory
• https://bugzilla.fedora.us/show_bug.cgi?id=1945
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16827
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801
• http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855
• http://lwn.net/Articles/95529/
• http://lwn.net/Articles/95530/
• http://seclists.org/fulldisclosure/2004/Jul/1227.html
• http://secunia.com/advisories/12175
• http://www.debian.org/security/2004/dsa-565
• http://www.gentoo.org/security/en/glsa/glsa-200407-23.xmlVendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:076
• http://www.redhat.com/support/errata/RHSA-2004-409.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/10819Exploit, Patch, Vendor Advisory
• https://bugzilla.fedora.us/show_bug.cgi?id=1945
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16827
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801

Published

Aug 6, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0550Buffer overflow in Real Networks RealPlayer 10 allows remote…
• CVE-2004-0551Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and…
• CVE-2004-0552Sophos Small Business Suite 1.00 on Windows does not properl…
• CVE-2004-0554Linux kernel 2.4.x and 2.6.x for x86 allows local users to c…
• CVE-2004-0555Buffer overflow in (1) queue.c and (2) queued.c in queue bef…
• CVE-2004-0556Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0558The Internet Printing Protocol (IPP) implementation in CUPS …
• CVE-2004-0559The maketemp.pl script in Usermin 1.070 and 1.080 allows loc…
• CVE-2004-0560Integer overflow in gopher daemon (gopherd) 3.0.3 allows rem…
• CVE-2004-0561Format string vulnerability in the log routine for gopher da…
• CVE-2004-0562Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0563The tspc.conf configuration file in freenet6 before 0.9.6 an…