PT-2013-1922
CVE-2012-6303
·
تاريخ النشر
2013-10-28
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Snack Sound Toolkit version 1.8.8p4
Description
The issue is related to a heap-based buffer overflow in the GetWavHeader function, which can be triggered by a large chunk size in a WAV file. This can cause a denial of service, resulting in a crash, and potentially allow the execution of arbitrary code.
Recommendations
For version 1.8.8p4, consider restricting the processing of WAV files with large chunk sizes until a fix is available. As a temporary workaround, avoid using the GetWavHeader function with untrusted input.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾