CVE-2003-0075 Information

Description

Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows remote attackers to execute arbitrary code via a negative offset value following a \fmt\ wave chunk.

Reference

http://marc.info/?l=bugtraq&m=104428700106672&w=2 http://marc.info/?l=bugtraq&m=104446346127432&w=2 http://www.iss.net/security_center/static/11227.php http://www.pivx.com/luigi/adv/blade942-adv.txt http://www.securityfocus.com/bid/6745