CVE:CVE-2014-8145
CNNVD:CNNVD-201412-503
Sound eXchange（SoX）是一套开源的音频处理工具。该工具支持播放、转换和录制多种音频格式文件。
SoX 14.4.1及之前版本的‘start_read’和‘AdpcmReadBlock’函数中存在基于堆的缓冲区溢出漏洞。远程攻击者可借助特制的WAV文件利用该漏洞执行任意代码，或造成拒绝服务。
solution:Upgrade sound_exchange_project sound_exchange to a higher version than 14.4.1,and avoid the version (,14.4.1]; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade oracle solaris to a higher version than 11.2,and avoid the version 11.2