PT-2013-1922
CVE-2012-6303
·
Published
2013-10-28
·
Updated
2024-06-15
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Snack Sound Toolkit version 1.8.8p4
Description
The issue is related to a heap-based buffer overflow in the GetWavHeader function, which can be triggered by a large chunk size in a WAV file. This can cause a denial of service, resulting in a crash, and potentially allow the execution of arbitrary code.
Recommendations
For version 1.8.8p4, consider restricting the processing of WAV files with large chunk sizes until a fix is available. As a temporary workaround, avoid using the GetWavHeader function with untrusted input.
Found an issue in the description? Have something to add? Feel free to write us 👾