CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9258

The CVE-2017-9258 family affects the SoundTouch library (notably TDStretch.cpp, SoundTouch 1.9.2). The issue allows remote attackers to trigger a denial of service (infinite loop and high CPU) via a crafted WAV file (CVE-2017-9258); related CVEs (CVE-2017-9259, CVE-2017-9260) describe memory allo...

CVE-2017-9258

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

CVE-2017-9260

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9259

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9260

CVE-2017-9260 affects SoundTouch 1.9.2 (TDStretchSSE::calcCrossCorr in sse_optimized.cpp). A crafted WAV file can trigger a heap-based buffer over-read, leading to an application crash (information from multiple Nessus/EulerOS advisories referencing SoundTouch 1.9.2 vulnerabilities). Affected pac...

CVE-2017-9259: Uncontrolled Resource Consumption

The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service memory allocation error and application crash via a crafted wav file...

CVE-2017-9260: Out-of-bounds Read

The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sseoptimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted wav file...

CVE-2017-9258: Loop with Unreachable Exit Condition

The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted wav file...

PT-2017-18809

Name of the Vulnerable Software and Affected Versions SoundTouch version 1.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and CPU consumption, via a crafted wav file. This is due to a problem in the TDStretch::processSamples function ...

PT-2017-18810

Name of the Vulnerable Software and Affected Versions SoundTouch version 1.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in a memory allocation error and application crash, via a crafted wav file. This is due to a problem in the...

PT-2017-18811

Name of the Vulnerable Software and Affected Versions SoundTouch version 1.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, by providing a crafted wav file. This is due to a problem in the...

Code injection

The Multicast DNS mDNS responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via port-5353 UDP...

CVE-2017-6520

The Multicast DNS mDNS responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via port-5353 UDP...

CVE-2017-6520

The CVE-2017-6520 issue affects the mDNS responder in Bose SoundTouch 30. The vulnerable behavior is that the mDNS responder answers IPv4 unicast queries with non-link-local source addresses, enabling remote attackers to trigger traffic amplification and potentially obtain sensitive information o...

PT-2017-17128

Name of the Vulnerable Software and Affected Versions BOSE Soundtouch 30 affected versions not specified Description The issue concerns the Multicast DNS mDNS responder in the BOSE Soundtouch 30, which incorrectly responds to IPv4 unicast queries from non-link-local source addresses. This behavio...

CVE-2017-6520: Undefined Security Weakness

The Multicast DNS mDNS responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via port-5353 UDP...

SoundTouch Controller - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application SoundTouch Controller published at the 'play' market has multiple vulnerabilities...