CVE-2017-16868

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2

Description The issue arises from the wav convert2mono function in lib/wav.c, which fails to properly restrict a multiplication within a malloc call. This allows remote attackers to cause a denial of service through an integer overflow and NULL pointer dereference by using a crafted WAV file.

Recommendations For SWFTools version 0.9.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.