224 matches found
UBUNTU-CVE-2018-14044
The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...
CVE-2018-14045
The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...
DEBIAN-CVE-2018-14045
The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...
CVE-2018-14045
CVE-2018-14045 affects SoundTouch 2.0 (FIRFilter::evaluateFilterMulti in FIRFilter.cpp) and is associated with denial of service via remote exploitation demonstrated by SoundStretch. Related issues in the SoundTouch 2.0 stack include RateTransposer::setChannels (CVE-2018-14044), BPMDetect (CVE-20...
CVE-2018-14044
The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...
CVE-2018-14044
The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...
BOSE SoundTouch cross-site scripting vulnerability (CNVD-2018-08340)
The BOSE SoundTouch is a wireless speaker device from the American company BOSE. A cross-site scripting vulnerability exists in BOSE SoundTouch. A remote attacker can exploit the vulnerability to take control of an account with the help of a specially crafted Spotify public playlist...
BOSE SoundTouch cross-site scripting vulnerability (CNVD-2018-08339)
The BOSE SoundTouch is a wireless speaker device from the American company BOSE. A cross-site scripting vulnerability exists in BOSE SoundTouch. A remote attacker could exploit this vulnerability to compromise an itunes/pandora account with specially crafted song data from a music service...
BOSE SoundTouch Remote Control Vulnerability
The BOSE SoundTouch is a wireless speaker device from the American company BOSE. A security vulnerability exists in BOSE SoundTouch. A remote attacker could exploit this vulnerability with the help of a specially crafted website to achieve remote control...
CVE-2017-17751
Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol...
CVE-2017-17750
Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify...
Design/Logic Flaw
Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora...
Design/Logic Flaw
Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify...
Design/Logic Flaw
Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol...
CVE-2017-17749
Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora...
CVE-2017-17749
Bose SoundTouch devices are affected by a cross-site scripting (XSS) vulnerability triggered by specially crafted song data from a music service (e.g., Pandora). The issue arises in the handling of metadata or payload within song data, enabling an attacker-controlled input to be interpreted as ex...
CVE-2017-17750
CVE-2017-17750 affects Bose SoundTouch devices. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via a crafted public playlist from Spotify, enabling script execution in user contexts. Root cause described across sources is XSS triggered by Spotify-public playlists; concrete pro...
CVE-2017-17751
Bose SoundTouch devices are affected by CVE-2017-17751. A remote attacker can gain remote control by luring the device to a crafted website using the WebSocket protocol. The vulnerability is documented across multiple sources (e.g., NVD/NVD CVSS 2.0/3.0: base scores 6.8 (MEDIUM) and 8.8 (HIGH) re...