CVE-2012-6303: Buffer Overflow
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6303?
CVE-2012-6303 has a high severity due to its potential to cause a denial of service and arbitrary code execution.
How do I fix CVE-2012-6303?
To fix CVE-2012-6303, update to the latest version of the Snack Sound Toolkit or WaveSurfer that addresses this vulnerability.
Which software is affected by CVE-2012-6303?
CVE-2012-6303 affects the Snack Sound Toolkit version 2.2.10 and WaveSurfer version 1.8.8-p4, among others.
What type of vulnerability is CVE-2012-6303?
CVE-2012-6303 is a heap-based buffer overflow vulnerability.
Can CVE-2012-6303 be exploited remotely?
Yes, CVE-2012-6303 can be exploited remotely by sending a specially crafted WAV file.