WaveSurfer '.wav' File Denial of Service Vulnerability

http://www.securityfocus.com/bid/54419

Security Info

Bugtraq ID:	54419
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 12 2012 12:00AM
Updated:	Jul 12 2012 12:00AM
Credit:	Jean Pascal Pereira
Vulnerable:

Not Vulnerable:

Security Discussion

WaveSurfer is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

WaveSurfer 1.8.8p4 and prior are vulnerable.

Proof of Concept and Security Exploits

The following exploit code is available:

/data/vulnerabilities/exploits/54419.pl

Security Solution(s)

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com.

Security References(s)

References:

Emagined Security Blog featuring Dr. Eugene Schultz

Secure Web Programming
by Vizual Services