Freeware Advanced Audio Coder 1.28 WAV File libfaac/frame.c faacEncOpen out-of-bounds

Summaryinfo

A vulnerability classified as problematic has been found in Freeware Advanced Audio Coder 1.28. The impacted element is the function faacEncOpen of the file libfaac/frame.c of the component WAV File Handler. This manipulation causes out-of-bounds. This vulnerability appears as CVE-2017-9130. The attack requires local access. In addition, an exploit is available.

Detailsinfo

A vulnerability has been found in Freeware Advanced Audio Coder 1.28 and classified as problematic. Affected by this vulnerability is the function faacEncOpen of the file libfaac/frame.c of the component WAV File Handler. The manipulation with an unknown input leads to a out-of-bounds vulnerability. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect availability. The summary by CVE is:

The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file.

The bug was discovered 06/19/2017. The weakness was presented 06/21/2017 as EDB-ID 42207 as not defined exploit (Exploit-DB). It is possible to read the advisory at exploit-db.com. This vulnerability is known as CVE-2017-9130 since 05/21/2017. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details and also a public exploit are known.

A public exploit has been developed by qflb.wu and been published even before and not after the advisory. It is possible to download the exploit at github.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 2 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (42207). See VDB-102702 for similar entry. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• Freeware Advanced Audio Coder

Version

• 1.28

License

• free

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion