Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SoX st_wavstartread()远程缓冲区溢出漏洞
Vulnerability Description
SoX是一套开源的音频处理工具。该工具支持播放、转换和录制多种音频格式文件。 SoX在处理WAV文件时存在缓冲区溢出问题，远程攻击者可以利用这个漏洞构建恶意文件，诱使用户使用SoX处理，可能以进程权限在系统上执行任意指令。 问题存在于'wav.c'文件的st_wavstartread()函数中，'sox'和'play'命令在调用此函数时不正确检查用户提供的变量数据，提交超长数据可破坏缓冲区，存在执行任意指令的可能。攻击者可以利用恶意文件诱使用户来处理以利用此漏洞。
CVSS Information
N/A
Vulnerability Type
N/A