CVE-2017-15266: Divide by Zero
Published Oct 11, 2017
·Updated
In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTORwavextractmethod in wavextractor.c via a zero sample rate.
Affected Software
1 affected component
GNU Libextractor=1.4
Remediation
Patch Available
Event History
Oct 11, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15266?
CVE-2017-15266 is rated as high severity due to the potential for causing application crashes.
2
How do I fix CVE-2017-15266?
To fix CVE-2017-15266, update to a version of GNU Libextractor that does not have this vulnerability.
3
What are the exploit conditions for CVE-2017-15266?
Exploitation of CVE-2017-15266 occurs when processing a WAV file with a zero sample rate.
4
Which version of GNU Libextractor is affected by CVE-2017-15266?
CVE-2017-15266 affects GNU Libextractor version 1.4 specifically.
5
Can CVE-2017-15266 lead to remote code execution?
CVE-2017-15266 does not lead to remote code execution but can cause application instability.