CVE-2017-16868 - In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplic

CVE-2017-16868

Summary

In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service (integer overflow and NULL pointer dereference) via a crafted WAV file.

References

https://github.com/matthiaskramm/swftools/issues/52

Vulnerable Configurations

cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*
cpe:2.3:a:swftools:swftools:0.9.2:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 27-11-2017 - 12:49)
Impact:
Exploitability:

CWE

CWE-476

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:P

refmap via4

misc

https://github.com/matthiaskramm/swftools/issues/52

Last major update

27-11-2017 - 12:49

Published

17-11-2017 - 09:29

Last modified

27-11-2017 - 12:49