Vulnerabilities (CVE)

Filtered by vendor Audacityteam Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-0490 1 Audacityteam 1 Audacity 2022-02-07 9.3 HIGH N/A
Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string.
CVE-2007-6061 1 Audacityteam 1 Audacity 2022-02-07 5.0 MEDIUM N/A
Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.