Security update for python (moderate)

This update for python fixes the following issues: The following security vulnerabilities were addressed: - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

Denial Of Service (DoS)

libaudiofile.so is vulnerable to denial of service DoS attacks. An attacker can trigger the attack by sending a malicious WAV file to readValue function in FileHandle.cpp, causing a heap-based buffer overflow that can crash the application or execute arbitrary code...

SUSE-SU-2018:2040-1 Security update for python

This update for python fixes the following issues: The following security vulnerabilities were addressed: - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

PT-2018-12576

Name of the Vulnerable Software and Affected Versions libwav versions prior to 2017-04-20 Description The issue is related to a SEGV in the wav write function located in libwav.c. Recommendations For versions prior to 2017-04-20, at the moment, there is no information about a newer version that...

libwav denial of service vulnerability

libwav is a wav encoding library written in C language. A security vulnerability exists in the 'printinfo' function of the wavinfo/wavinfo.c file in libwav versions 2017-04-20 and earlier. An attacker can exploit this vulnerability to cause a denial of service segment error...

[SECURITY] Fedora 28 Update: soundtouch-2.0.0-3.fc28

SoundTouch is a LGPL-licensed open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or files. The SoundTouch library is suited for application developers writing sound processing tools that require tempo/pitch control functionality, or just for...

libwav SEGV vulnerability

libwav is a wav encoding library written in C language. A security vulnerability exists in the 'applygain' function in the wavgain/wavgain.c file in libwav versions 2017-04-20 and earlier. An attacker can exploit this vulnerability to cause a denial of service segment error...

Libwav infinite loop vulnerability

libwav is a wav encoding library written in C language. A security vulnerability exists in the 'wavread' function of the libwav.c file in libwav 2017-04-20 and earlier versions. An attacker can exploit the vulnerability to cause an infinite loop...

CVE-2018-14052

An issue has been found in libwav through 2017-04-20. It is a SEGV in the function applygain in wavgain/wavgain.c...

PT-2018-12305

Name of the Vulnerable Software and Affected Versions libwav through 2017-04-20 Description The issue is related to a SEGV in the wav free function in libwav.c. Recommendations For versions through 2017-04-20, at the moment, there is no information about a newer version that contains a fix for th...

PT-2018-12307

Name of the Vulnerable Software and Affected Versions libwav through 2017-04-20 Description The issue is related to a SEGV in the apply gain function located in wav gain/wav gain.c. Recommendations For versions through 2017-04-20, consider restricting access to the apply gain function in wav...

PT-2018-12303

Name of the Vulnerable Software and Affected Versions libwav through 2017-04-20 Description The issue is related to a SEGV in the print info function located in wav info/wav info.c. Recommendations For libwav through 2017-04-20, consider disabling the print info function as a temporary workaround...

UBUNTU-CVE-2017-16890

SWFTools 0.9.2 has a divide-by-zero error in the wavconvert2mono function in lib/wav.c because the align value may be zero...

Boxoft WAV to WMA Converter 1.0 - Local Buffer Overflow (SEH)

Boxoft WAV to WMA Converter 1.0 - Local Buffer Overflow SEH Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow SEH Date: 2018-07-08 Software Link: http://www.boxoft.com/wav-to-wma/ Software Version:1.0 Exploit Author: Achilles Target: Windows 7 x64 CVE: Description: A malicious .wav...

Boxoft WAV to WMA Converter 1.0 - Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow SEH Software Link: http://www.boxoft.com/wav-to-wma/ Software Version:1.0 Exploit Author: Achilles Target: Windows 7 x64 CVE: Description: A malicious .wav file cause this...

PT-2018-6359

Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: The issue is related to a divide-by-zero error in the wav convert2mono function, located in lib/wav.c, which occurs because the align value may be zero. Recommendations: For SWFTools version 0.9.2, consider...

Boxoft WAV to WMA Converter 1.0 - Local Buffer Overflow (SEH)

Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow SEH Date: 2018-07-08 Software Link: http://www.boxoft.com/wav-to-wma/ Software Version:1.0 Exploit Author: Achilles Target: Windows 7 x64 CVE: Description: A malicious .wav file cause this vulnerability. Category: Local Exploit buffe...

Boxoft WAV To WMA Converter 1.0 Buffer Overflow

Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow SEH Date: 2018-07-08 Software Link: http://www.boxoft.com/wav-to-wma/ Software Version:1.0 Exploit Author: Achilles Target: Windows 7 x64 CVE: Description: A malicious .wav file cause this vulnerability. Category: Local Exploit buffe...

Boxoft WAV To MP3 Converter 1.1 Buffer Overflow Exploit

This Metasploit module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter versions 1.0 and 1.1. By constructing a specially crafted WAV file and attempting to convert it to an MP3 file in the application, a buffer is overwritten, which allows for running shellcode. This module requir...

Boxoft WAV to MP3 Converter 1.1 - Buffer Overflow (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Boxoft WAV to MP3 Converter v1.1 Buffer Overflow", 'Description' = %q This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter...