Audacityteam

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Audacityteam records in CISA KEV

No Audacityteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Audacity 6 records MEDIUM

Records

6 records

TI-2009-00470 CVE-2009-0490 · GHSA-8f8x-6454-8222

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in…

MEDIUM 57

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash)…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.16625 Published 2009-02-10 No fix listed CWE-787

TI-2017-14357 CVE-2017-1000010 · GHSA-hv4f-c38w-r52w

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution.

LOW 38

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02136 Published 2017-07-13 No fix listed CWE-427

TI-2016-02288 CVE-2016-2540 · GHSA-w9gj-hm7x-w4cj

Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory…

LOW 29

Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted FORMATCHUNK structure.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01885 Published 2018-02-07 No fix listed CWE-119

TI-2007-05795 CVE-2007-6061 · GHSA-3pxp-pwrp-2w6f

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for…

LOW 29

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the d…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03413 Published 2007-11-20 No fix listed CWE-59

TI-2016-02289 CVE-2016-2541 · GHSA-whhg-wh62-8mjc

Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory…

LOW 27

Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP2 file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01136 Published 2018-02-07 No fix listed CWE-119

TI-2020-09537 CVE-2020-11867 · GHSA-wrfq-hrw9-9rm3

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default.

LOW 17

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00475 Published 2020-11-30 No fix listed CWE-276

Open these records in search →

Critical	1
High	1
Medium	3
Low	1
No CVSS	0