CVE-2018-12638: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app...

PT-2019-8913

Name of the Vulnerable Software and Affected Versions Bose Soundtouch app version 18.1.4 Description An issue in the Bose Soundtouch app allows for the execution of JavaScript on a registered Bose User Account if a speaker has been connected to the app. This is possible due to the lack of fronten...

openSUSE Security Update : soundtouch (openSUSE-2019-86)

This update for soundtouch fixes the following issues : Security issues fixed : - CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact bsc1108632 - CVE-2018-17097: Fixed a double free...

openSUSE: Security Advisory for soundtouch (openSUSE-SU-2019:0086-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for soundtouch (moderate)

openSUSE Security Update: Security update for soundtouch Announcement ID: openSUSE-SU-2019:0086-1 Rating: moderate References: 1108631 1108632 Cross-References: CVE-2018-17097 CVE-2018-17098 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available...

SUSE SLED15 / SLES15 Security Update : soundtouch (SUSE-SU-2019:0112-1)

This update for soundtouch fixes the following issues : Security issues fixed : CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact bsc1108632 CVE-2018-17097: Fixed a double free,...

SUSE-SU-2019:0112-1 Security update for soundtouch

This update for soundtouch fixes the following issues: Security issues fixed: - CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact bsc1108632 - CVE-2018-17097: Fixed a double free,...

SUSE SLED12 / SLES12 Security Update : soundtouch (SUSE-SU-2019:0096-1)

This update for soundtouch fixes the following issues : Security issues fixed : CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact bsc1108632 CVE-2018-17097: Fixed a double free,...

SUSE-SU-2019:0096-1 Security update for soundtouch

This update for soundtouch fixes the following issues: Security issues fixed: - CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact bsc1108632 - CVE-2018-17097: Fixed a double free,...

Soundtouch App Cross-Site Scripting Vulnerability

Soundtouch App is a mobile setup software for music speakers. A cross-site scripting vulnerability exists in Soundtouch App. An attacker can exploit the vulnerability to execute malicious javascript code in the user context...

Fedora 29 : soundtouch (2018-09802a742a)

Security fix version for CVE-2018-17098 , CVE-2018-17096 and CVE-2018-17097 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 28 : soundtouch (2018-f159412ac7)

Security fix version for CVE-2018-17098 , CVE-2018-17096 and CVE-2018-17097 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 28 : soundtouch (2018-f4f75985b8)

Security fix for CVE-2018-14044, CVE-2018-14045 and CVE-2018-1000223 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 28 : soundtouch (2018-93a43993aa)

Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

SUSE SLED15 / SLES15 Security Update : soundtouch (SUSE-SU-2018:3068-1)

This update for soundtouch fixes the following security issue : CVE-2018-1000223: Prevent buffer overflow in WavInFile::readHeaderBlock that could have resulted in arbitrary code execution when opening maliocius file in soundstretch utility bsc1103676 Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : soundtouch (SUSE-SU-2018:3610-1)

This update for soundtouch fixes the following issues : CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service heap corruption from size inconsistency or possibly have unspecified other impact, as demonstrated by SoundStretch. bsc1108632 CVE-2018-17097: The...

SUSE SLED12 / SLES12 Security Update : soundtouch (SUSE-SU-2018:3606-2)

This update for soundtouch fixes the following issues : CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service heap corruption from size inconsistency or possibly have unspecified other impact, as demonstrated by SoundStretch. bsc1108632 CVE-2018-17097: The...

SUSE-SU-2018:3606-2 Security update for soundtouch

This update for soundtouch fixes the following issues: - CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service heap corruption from size inconsistency or possibly have unspecified other impact, as demonstrated by SoundStretch. bsc1108632 - CVE-2018-17097: The...

Fedora Update for soundtouch FEDORA-2018-dbe9da512d

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for soundtouch FEDORA-2018-f159412ac7

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...