CVE-2003-0075

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows remote attackers to execute arbitrary code via a negative offset value following a "fmt" wave chunk.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=104428700106672&w=2
http://marc.info/?l=bugtraq&m=104446346127432&w=2
http://www.iss.net/security_center/static/11227.phpVendor Advisory
http://www.pivx.com/luigi/adv/blade942-adv.txtExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/6745Exploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=104428700106672&w=2
http://marc.info/?l=bugtraq&m=104446346127432&w=2
http://www.iss.net/security_center/static/11227.phpVendor Advisory
http://www.pivx.com/luigi/adv/blade942-adv.txtExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/6745Exploit, Patch, Vendor Advisory

Timeline

Published: Feb 19, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-00766.4Unknown vulnerability in the directory parser for Direct Connect 4 Linux (dcgui) before 0.2.2 allows remote attackers to read files outside CVE-2003-00777.5The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify the window title via a CVE-2003-00785.0ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block ciphe CVE-2003-00792.1The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via CVE-2003-00807.5The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to by CVE-2003-00817.5Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arb CVE-2003-00825.0The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service CVE-2003-00835.0Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could ma CVE-2003-00847.5mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other progr CVE-2003-008510.0Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, al CVE-2003-00861.2The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.CVE-2003-00877.2Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users to gain privileges