PT-2018-6720

Name of the Vulnerable Software and Affected Versions: Sound eXchange SoX versions 14.4.2 and earlier Description: The issue is related to a corrupt header that specifies zero channels, triggering an infinite loop and a resultant NULL pointer dereference in the startread function in xa.c. This ma...

CVE-2017-18189: NULL Pointer Dereference

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

PT-2017-14134

Name of the Vulnerable Software and Affected Versions Sound eXchange SoX version 14.4.2 Description The issue is triggered by supplying a malformed AIFF file to the lsx aiffstartread function in the aiff.c file, resulting in a Use-After-Free vulnerability. Recommendations For version 14.4.2,...

CVE-2017-15642: Use After Free

In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...

CVE-2017-15372

There is a stack-based buffer overflow in the lsxmsadpcmblockexpandi function of adpcm.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file...

CVE-2017-15372: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a stack-based buffer overflow in the lsxmsadpcmblockexpandi function of adpcm.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file...

PT-2017-14029

Name of the Vulnerable Software and Affected Versions Sound eXchange SoX version 14.4.2 Description The issue is related to a reachable assertion abort in the function sox append comment in formats.c. It can be triggered by a crafted input, leading to a denial of service attack during the...

CVE-2017-15371: Reachable Assertion

There is a reachable assertion abort in the function soxappendcomment in formats.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file...

PT-2017-14028

Name of the Vulnerable Software and Affected Versions Sound eXchange SoX version 14.4.2 Description The issue is related to a heap-based buffer overflow in the ImaExpandS function of ima rw.c. This can be triggered by a crafted input, leading to a denial of service attack during the conversion of...

CVE-2017-15370: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a heap-based buffer overflow in the ImaExpandS function of imarw.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file...

PT-2017-14030

Name of the Vulnerable Software and Affected Versions Sound eXchange SoX version 14.4.2 Description A stack-based buffer overflow issue exists in the lsx ms adpcm block expand i function of adpcm.c. This can be triggered by a crafted input, leading to a denial of service attack during the...

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities

Sound eXchange SoX multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply...

CVE-2017-11359: Divide By Zero

The wavwritehdr function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted snd file, during conversion to a wav file...

CVE-2017-11358: Out-of-bounds Read

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

CVE-2014-8145: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in Sound eXchange SoX 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the 1 startread or 2 AdpcmReadBlock function...

CVE-2004-0557: Undefined Security Weakness

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...