CVE-2017-17751

Bose SoundTouch devices are affected by CVE-2017-17751. A remote attacker can gain remote control by luring the device to a crafted website using the WebSocket protocol. The vulnerability is documented across multiple sources (e.g., NVD/NVD CVSS 2.0/3.0: base scores 6.8 (MEDIUM) and 8.8 (HIGH) re...

PT-2018-6564 · Bose · Bose Soundtouch

Name of the Vulnerable Software and Affected Versions: Bose SoundTouch affected versions not specified Description: The issue allows remote attackers to achieve remote control of Bose SoundTouch devices via a crafted web site that uses the WebSocket Protocol. Recommendations: At the moment, there...

CVE-2017-17749: Improper Neutralization of Input During Web Page Generation

Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora...

CVE-2017-17750: Improper Neutralization of Input During Web Page Generation

Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify...

CVE-2017-17751: Undefined Security Weakness

Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol...

PT-2018-6562 · Bose · Bose Soundtouch

Name of the Vulnerable Software and Affected Versions: Bose SoundTouch affected versions not specified Description: The issue allows for cross-site scripting XSS attacks through specially crafted song data from a music service. An example of such an attack is demonstrated using Pandora...

PT-2018-6563 · Spotify +1 · Spotify +1

Name of the Vulnerable Software and Affected Versions: Bose SoundTouch affected versions not specified Description: The issue allows for cross-site scripting XSS attacks through a crafted public playlist from Spotify. Recommendations: At the moment, there is no information about a newer version...

SoundTouch Denial of Service Vulnerability

SoundTouch is an open-source audio processing library for changing the speed, pitch, and playback rate of an audio stream, among other things. A security vulnerability exists in the 'TDStretchSSE::calcCrossCorr' function in the source/SoundTouch/sseoptimized.cpp file in SoundTouch version 1.9.2. ...

SoundTouch 1.9.2 - Multiple Vulnerabilities

SoundTouch 1.9.2 - Multiple Vulnerabilities SoundTouch multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoundTouch is an open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or audio files. The...

SoundTouch 1.9.2 - Multiple Vulnerabilities

Exploit for linux platform in category dos / poc SoundTouch multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoundTouch is an open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or audio files...

SoundTouch Denial of Service Vulnerability (CNVD-2017-26277)

SoundTouch is an open-source audio processing library for changing the speed, pitch, and playback rate of an audio stream, among other things. A security vulnerability exists in the 'TDStretch::processSamples' function in the source/SoundTouch/TDStretch.cpp file in SoundTouch version 1.9.2. A...

SoundTouch Denial of Service Vulnerability (CNVD-2017-26278)

SoundTouch is an open-source audio processing library for changing the speed, pitch, and playback rate of an audio stream, among other things. A security vulnerability exists in the 'TDStretch::acceptNewOverlapLength' function in the source/SoundTouch/TDStretch.cpp file in SoundTouch version 1.9....

SoundTouch 1.9.2 - Multiple Vulnerabilities

SoundTouch multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoundTouch is an open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or audio files. The library additionally supports estimating...

CVE-2017-9258

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9258

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...