PT-2013-1922

CVE-2012-6303

·

Published

2013-10-28

·

Updated

2024-06-15

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Snack Sound Toolkit version 1.8.8p4
Description The issue is related to a heap-based buffer overflow in the GetWavHeader function, which can be triggered by a large chunk size in a WAV file. This can cause a denial of service, resulting in a crash, and potentially allow the execution of arbitrary code.
Recommendations For version 1.8.8p4, consider restricting the processing of WAV files with large chunk sizes until a fix is available. As a temporary workaround, avoid using the GetWavHeader function with untrusted input.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2015_0382-1
OPENSUSE-SU-2017_3016-1
OPENSUSE-SU-2024:11390-1
Found an issue in the description? Have something to add? Feel free to write us 👾