CVE-2018-17098 in Soundtouch

Sumário

de MITRE

The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 16/09/2018
• Divulgação: 16/09/2018
• Moderação: aceite
• Entrada: VDB-124107
• CPE: pronto
• CWE: CWE-119 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.02838
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-17098
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-17098
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-17098/