CVE-2018-17098 in Soundtouch

الملخص

بحسب MITRE

The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• حجز: 16/09/2018
• إفشاء: 16/09/2018
• الاعتدال: تمت الموافقة
• إدخال: VDB-124107
• CPE: جاهز
• CWE: CWE-119 (مؤكد)
• CVSS: 8.8 (NVD)
• EPSS: 0.02838
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-17098
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-17098
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-17098/