PT-2013-1922

CVE-2012-6303

·

تاريخ النشر

2013-10-28

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 2.0
6.8
متوسطة
المقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Snack Sound Toolkit version 1.8.8p4
Description The issue is related to a heap-based buffer overflow in the GetWavHeader function, which can be triggered by a large chunk size in a WAV file. This can cause a denial of service, resulting in a crash, and potentially allow the execution of arbitrary code.
Recommendations For version 1.8.8p4, consider restricting the processing of WAV files with large chunk sizes until a fix is available. As a temporary workaround, avoid using the GetWavHeader function with untrusted input.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
OPENSUSE-SU-2015_0382-1
OPENSUSE-SU-2017_3016-1
OPENSUSE-SU-2024:11390-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾