CVE-2004-0557

Exp

Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.

Published: 2004-08-06 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2004-0557 is rated High Exploit Risk (93.2/100): CVSS Critical severity, with high exploitation likelihood (EPSS 48.55%, 98th percentile). Core evidence: 3 public exploit reference(s) are indexed (Exploit-DB). EPSS rose +4.04% over the last day, indicating growing attacker interest. Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2004-0557

EDB-ID Source Kind Published Link
374 exploit_db edb 2004-08-04 Exploit-DB ↗
369 exploit_db edb 2004-08-01 Exploit-DB ↗
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2004-0557

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-04-07 44.51% 48.55% +4.04%
2 2025-03-30 39.33% 44.51% +5.18%
3 2025-03-29 39.33%

Full EPSS history (8 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2004-0557

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
10.0 2.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
10.0 10.0 [email protected]

Weakness enumeration for CVE-2004-0557

OS Trackers for CVE-2004-0557

vendor priority summary link
debian not yet assigned CVE-2004-0557 not yet assigned priority: Debian including 1 source packages (sox), 3 status rows across 3 suites (bookworm, bullseye, trixie): resolved 3. https://security-tracker.debian.org/tracker/CVE-2004-0557
gentoo normal CVE-2004-0557: 1 GLSA(s) (200407-23), 1 atom(s) (media-sound/sox); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2004-0557
redhat high https://access.redhat.com/security/cve/CVE-2004-0557
ubuntu medium CVE-2004-0557 medium priority: Ubuntu including 1 source packages (sox), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 3, needs-triage 1. https://ubuntu.com/security/CVE-2004-0557

Affected software / configurations for CVE-2004-0557

Vendor Product Version Raw CPE
sox sox 12.17.2 cpe:2.3:a:sox:sox:12.17.2:*:*:*:*:*:*:*
sox sox 12.17.3 cpe:2.3:a:sox:sox:12.17.3:*:*:*:*:*:*:*
sox sox 12.17.4 cpe:2.3:a:sox:sox:12.17.4:*:*:*:*:*:*:*
conectiva linux 8.0 cpe:2.3:o:conectiva:linux:8.0:*:*:*:*:*:*:*
conectiva linux 9.0 cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*
conectiva linux 10.0 cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*
gentoo linux 1.4 cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*
redhat enterprise_linux 3.0 cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*
redhat enterprise_linux 3.0 cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*
redhat enterprise_linux 3.0 cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*
redhat enterprise_linux_desktop 3.0 cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
redhat fedora_core core_1.0 cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*
redhat fedora_core core_2.0 cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*

References for CVE-2004-0557

URL Tags
http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855
http://lwn.net/Articles/95529/
http://lwn.net/Articles/95530/
http://seclists.org/fulldisclosure/2004/Jul/1227.html
http://secunia.com/advisories/12175
http://www.debian.org/security/2004/dsa-565
http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:076
http://www.redhat.com/support/errata/RHSA-2004-409.html Patch Vendor Advisory
http://www.securityfocus.com/bid/10819 Exploit Patch Vendor Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=1945
https://exchange.xforce.ibmcloud.com/vulnerabilities/16827
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801
cvelogic Threat Intelligence