Unrated severityNVD Advisory· Published Oct 28, 2013· Updated Apr 29, 2026
CVE-2012-6303
CVE-2012-6303
Description
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.
Affected products
4- cpe:2.3:a:kth:snack_sound_toolkit:2.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:kth:wavesurfer:1.8.8:p4:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.exploit-db.com/exploits/19772nvdExploitVDB Entry
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00034.htmlnvdThird Party Advisory
- secunia.com/advisories/49889nvdVendor Advisory
- security.gentoo.org/glsa/glsa-201309-04.xmlnvdThird Party Advisory
- www.openwall.com/lists/oss-security/2012/12/10/2nvdMailing ListThird Party Advisory
- www.mandriva.com/security/advisoriesnvdBroken Link
News mentions
0No linked articles in our index yet.