CVE-2017-9258

The CVE-2017-9258 family affects the SoundTouch library (notably TDStretch.cpp, SoundTouch 1.9.2). The issue allows remote attackers to trigger a denial of service (infinite loop and high CPU) via a crafted WAV file (CVE-2017-9258); related CVEs (CVE-2017-9259, CVE-2017-9260) describe memory allo...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9258

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9258

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

PT-2017-18811

Name of the Vulnerable Software and Affected Versions SoundTouch version 1.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, by providing a crafted wav file. This is due to a problem in the...

PT-2017-18809

Name of the Vulnerable Software and Affected Versions SoundTouch version 1.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and CPU consumption, via a crafted wav file. This is due to a problem in the TDStretch::processSamples function ...

PT-2017-18810

Name of the Vulnerable Software and Affected Versions SoundTouch version 1.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in a memory allocation error and application crash, via a crafted wav file. This is due to a problem in the...

CVE-2017-9259: Uncontrolled Resource Consumption

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9412: Improper Restriction of Operations within the Bounds of a Memory Buffer

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9258: Loop with Unreachable Exit Condition

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

SWFTools Denial of Service Vulnerability (CNVD-2017-15103)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service crash...

CVE-2017-11099

When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...

UBUNTU-CVE-2017-11099

When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wavconvert2mono function in lib/wav.c...

PT-2017-11739

Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue arises when SWFTools processes a crafted file in wav2swf, leading to a Segmentation Violation in the wav convert2mono function in lib/wav.c. Recommendations For SWFTools version 0.9.2, as a temporar...

thesoundarchive.com XSS vulnerability

Vulnerable URL: http://www.thesoundarchive.com/play-wav-files.asp?sound=1"...

Freeware Advanced Audio Coder 'faacEncOpen' Function Denial of Service Vulnerability

Freeware Advanced Audio Coder FAAC is a free advanced audio coder. A security vulnerability exists in the 'faacEncOpen' function in the libfaac/frame.c file in FAAC version 1.28. A remote attacker can exploit this vulnerability to cause a denial of service invalid memory read and application cras...

Design/Logic Flaw

The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder FAAC 1.28 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...