CVE-2017-7741: Buffer Overflow
Published Apr 12, 2017
·Updated
In libsndfile before 1.0.28, an error in the "flacbuffercopy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
Affected Software
1 affected component
Libsndfile Project Libsndfile<=1.0.27
Remediation
Event History
Apr 12, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-7741?
CVE-2017-7741 is classified as a high severity vulnerability due to its potential to cause memory corruption.
2
How can CVE-2017-7741 be exploited?
CVE-2017-7741 can be exploited by using a specially crafted FLAC file during a resample attempt, leading to a segmentation violation.
3
How do I fix CVE-2017-7741?
To fix CVE-2017-7741, upgrade to libsndfile version 1.0.28 or later.
4
What software is affected by CVE-2017-7741?
CVE-2017-7741 affects libsndfile versions prior to 1.0.28.
5
What impact does CVE-2017-7741 have on systems?
The impact of CVE-2017-7741 includes potential crashes and denial of service due to memory write access violations.