CVE-2019-1010315
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD
Description
WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc.
Affected (6)
Show all products
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 30 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 18.04 |
References (12)
Source: josh@bress.net
PatchThird Party Advisory
Source: josh@bress.net
ExploitIssue TrackingThird Party Advisory
Source: josh@bress.net
Mailing ListThird Party Advisory
Source: josh@bress.net
Source: josh@bress.net
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.