CVE-2012-6303

MEDIUM 6.8CVE-2012-6303 · Published 28/10/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
snack sound toolkit kth	`= 2.2.10`	No fix yet
wavesurfer kth	`= 1.8.8`	No fix yet

Description

Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.

References

lists.opensuse.org/opensuse-security-announce/2015-02/msg00034.html · Third Party Advisory
secunia.com/advisories/49889 · Vendor Advisory
security.gentoo.org/glsa/glsa-201309-04.xml · Third Party Advisory
exploit-db.com/exploits/19772 · Exploit
mandriva.com/security/advisories · Broken Link
openwall.com/lists/oss-security/2012/12/10/2 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free