CVE-2012-6303

2013-10-2822:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2012-6303

heap-based buffer overflow

getwavheader

snack sound toolkit

wavesurfer

denial of service

remote code execution

nvd

7.8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.038 Low

EPSS

Percentile

91.7%

JSON

Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.

CPENameOperatorVersion
kth:snack_sound_toolkitkth snack sound toolkiteq2.2.10
kth:wavesurferkth wavesurfereq1.8.8
opensuse:opensuseopensuseeq13.1
opensuse:opensuseopensuseeq13.2

CPE	Name	Operator	Version
kth:snack_sound_toolkit	kth snack sound toolkit	eq	2.2.10
kth:wavesurfer	kth wavesurfer	eq	1.8.8
opensuse:opensuse	opensuse	eq	13.1
opensuse:opensuse	opensuse	eq	13.2