Lucene search
HistoryOct 28, 2013 - 10:55 p.m.
CVE-2012-6303
cve-2012-6303
heap-based buffer overflow
getwavheader
snack sound toolkit
wavesurfer
denial of service
remote code execution
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.038 Low
EPSS
Percentile
91.9%
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.
Affected configurations
Node
kthsnack_sound_toolkitMatch2.2.10
ORkthwavesurferMatch1.8.8p4
Node
opensuseopensuseMatch13.1
ORopensuseopensuseMatch13.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| kth:snack_sound_toolkit | kth snack sound toolkit | eq | 2.2.10 |
| kth:wavesurfer | kth wavesurfer | eq | 1.8.8 |
Related
openvas
openvas
Fedora Update for tcl-snack FEDORA-2013-0110
2013-01-15 00:00:00
Gentoo Security Advisory GLSA 201309-04
2015-09-29 00:00:00
Fedora Update for tcl-snack FEDORA-2013-0098
2013-01-15 00:00:00
nessus
nessus
Fedora 18 : tcl-snack-2.2.10-17.fc18 (2013-0083)
2013-01-14 00:00:00
Fedora 17 : tcl-snack-2.2.10-17.fc17 (2013-0098)
2013-01-14 00:00:00
openSUSE Security Update : snack (openSUSE-2015-183)
2015-02-27 00:00:00
suse
suse
Security update for snack (important)
2017-11-15 15:06:54
Security update for snack (important)
2015-02-26 11:04:48
nvd
nvd
CVE-2012-6303
2013-10-28 22:55:03
fedora
fedora
[SECURITY] Fedora 18 Update: tcl-snack-2.2.10-17.fc18
2013-01-12 00:41:10
[SECURITY] Fedora 17 Update: tcl-snack-2.2.10-17.fc17
2013-01-12 15:10:08
[SECURITY] Fedora 16 Update: tcl-snack-2.2.10-17.fc16
2013-01-12 15:19:59
ubuntucve
ubuntucve
CVE-2012-6303
2013-10-28 00:00:00
cvelist
cvelist
CVE-2012-6303
2013-10-28 22:00:00
prion
prion
Heap overflow
2013-10-28 22:55:00
gentoo
gentoo
Snack: User-assisted execution of arbitrary code
2013-09-11 00:00:00
debiancve
debiancve
CVE-2012-6303
2013-10-28 22:55:03
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.038 Low
EPSS
Percentile
91.9%
Related for CVE-2012-6303