"Libsndfile is a C library for reading and writing files containing sampled sound (such as MS Windows WAV and the Apple/SGI AIFF format) through one standard library interface." Secunia Research has discovered a vulnerability in libsndfile, which can be exploited by malicious people to compromise an application using the library.
The vulnerability is caused due to an integer overflow error in the processing of CAF description chunks. This can be exploited to cause a heap-based buffer overflow by tricking the user into processing aspecially crafted CAF audio file.
Successful exploitation may allow execution of arbitrary code.
