CVE-2012-6303
EPSS 10.2%
Description
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.
How to fix CVE-2012-6303
To remediate CVE-2012-6303, upgrade the affected package to a fixed version below.
- Debian/snack—upgrade to 2.2.10-dfsg1-12.1 or later
Is CVE-2012-6303 being exploited?
Moderate — EPSS is 10.2%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 2.2.10-dfsg1-12.1