Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00034.html | Third Party Advisory |
http://secunia.com/advisories/49889 | Vendor Advisory |
http://security.gentoo.org/glsa/glsa-201309-04.xml | Third Party Advisory |
http://www.exploit-db.com/exploits/19772 | Exploit VDB Entry |
http://www.mandriva.com/security/advisories?name=MDVSA-2013:126 | Broken Link |
http://www.openwall.com/lists/oss-security/2012/12/10/2 | Mailing List Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2013-10-28T22:00:00
Updated: 2015-03-13T15:57:00
Reserved: 2012-12-06T00:00:00
Link: CVE-2012-6303
JSON object: View
NVD Information
Status : Analyzed
Published: 2013-10-28T22:55:03.600
Modified: 2018-10-30T16:27:35.843
Link: CVE-2012-6303
JSON object: View
Redhat Information
No data.
CWE