Main
Vulnerability Database
Exploits
ID:3633 - Exploit for Out-of-bounds read in SoX - CVE-2017-11358
ID:3633 - Exploit for Out-of-bounds read in SoX - CVE-2017-11358
Published: July 29, 2020
Vulnerability identifier: #VU32014
Vulnerability risk: Low
CVE-ID: CVE-2017-11358
CWE-ID: CWE-125
Exploitation vector: Local access
Vulnerable software:
SoX
SoX
Link to public exploit:
Vulnerability description
The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.
The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.