Buffer overflow in WavPack - CVE-2018-10539

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU12362

Buffer overflow in WavPack - CVE-2018-10539

Published: May 3, 2018


Vulnerability identifier: #VU12362
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-10539
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error within ParseDsdiffHeaderConfig function in dsdiff.c when processing WAV files. A remote unauthenticated attacker can create a specially crafted WAV file, trick the victim into opening it and trigger integer overflow in bytes_to_copy calculation and subsequent malloc call 

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

WavPack
Debian Linux
Fedora
Slackware Linux
wavpack (Alpine package)
wavpack
mingw-wavpack

How to mitigate CVE-2018-10539


wavpack (Alpine package) - addressed in versions 5.1.0-r2, 5.1.0-r6
wavpack - addressed in versions 5.1.0-8.fc27, 5.1.0-8.fc28
mingw-wavpack - addressed in versions 5.1.0-9.el7, 5.1.0-9.fc30, 5.1.0-9.fc31

External References

Related Security Bulletins