Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-1ska-p8g4-yudv
Vulnerability ID VCID-1ska-p8g4-yudv
Aliases CVE-2008-5824
Summary audiofile: heap-based overflow in Microsoft ADPCM compression module (app crash, arb. code execution)
Status Published
Exploitability 2.0
Weighted Severity 6.1
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-122 Heap-based Buffer Overflow
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.10215 https://api.first.org/data/v1/epss?cve=CVE-2008-5824
epss 0.10215 https://api.first.org/data/v1/epss?cve=CVE-2008-5824
epss 0.10215 https://api.first.org/data/v1/epss?cve=CVE-2008-5824
epss 0.10215 https://api.first.org/data/v1/epss?cve=CVE-2008-5824
epss 0.10215 https://api.first.org/data/v1/epss?cve=CVE-2008-5824
epss 0.10215 https://api.first.org/data/v1/epss?cve=CVE-2008-5824
epss 0.10215 https://api.first.org/data/v1/epss?cve=CVE-2008-5824
epss 0.14579 https://api.first.org/data/v1/epss?cve=CVE-2008-5824
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2008-5824
Reference id Reference type URL
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
http://musicpd.org/mantis/view.php?id=1915
http://openwall.com/lists/oss-security/2008/12/30/1
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5824.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5824
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5824
http://secunia.com/advisories/33273
http://www.securityfocus.com/bid/33066
http://www.ubuntu.com/usn/USN-912-1
http://www.vupen.com/english/advisories/2009/0005
479966 https://bugzilla.redhat.com/show_bug.cgi?id=479966
510205 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205
cpe:2.3:a:68k:audiofile:0.2.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:68k:audiofile:0.2.6:*:*:*:*:*:*:*
CVE-2008-5824 https://nvd.nist.gov/vuln/detail/CVE-2008-5824
CVE-2008-5824;OSVDB-51069 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/32691.txt
CVE-2008-5824;OSVDB-51069 Exploit https://www.securityfocus.com/bid/33066/info
USN-912-1 https://usn.ubuntu.com/912-1/
Data source Exploit-DB
Date added Dec. 30, 2008
Description Audio File Library 0.2.6 - libaudiofile 'msadpcm.c .WAV' File Processing Buffer Overflow
Ransomware campaign use Known
Source publication date Dec. 30, 2008
Exploit type remote
Platform linux
Source update date Jan. 24, 2017
Source URL https://www.securityfocus.com/bid/33066/info
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2008-5824
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.93109
EPSS Score 0.10215
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:58:33.858998+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5824.json 38.0.0