Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-03-20 CVE-2017-6837 Improper Input Validation vulnerability in Audiofile 0.3.6
WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.
local
low complexity
audiofile CWE-20
5.5
2017-03-20 CVE-2017-6836 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.
local
low complexity
audiofile debian CWE-119
5.5
2017-03-20 CVE-2017-6835 Divide By Zero vulnerability in Audiofile 0.3.6
The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
local
low complexity
audiofile CWE-369
5.5
2017-03-20 CVE-2017-6834 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
local
low complexity
audiofile debian CWE-119
5.5
2017-03-20 CVE-2017-6833 Divide By Zero vulnerability in Audiofile 0.3.6
The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
local
low complexity
audiofile CWE-369
5.5
2017-03-20 CVE-2017-6832 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
local
low complexity
audiofile debian CWE-119
5.5
2017-03-20 CVE-2017-6831 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
local
low complexity
audiofile debian CWE-119
5.5
2017-03-20 CVE-2017-6830 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Audiofile 0.3.6
Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
local
low complexity
audiofile CWE-119
5.5
2017-03-20 CVE-2017-6829 Out-of-bounds Read vulnerability in Audiofile 0.3.6
The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
local
low complexity
audiofile CWE-125
5.5
2017-03-20 CVE-2017-6805 Path Traversal vulnerability in Mobatek Mobaxterm 9.4
Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a ..
network
low complexity
mobatek CWE-22
5.3