Denial of Service Vulnerability in Freeware Advanced Audio Coder by Free Software Foundation
CVE-2017-9130

5.5MEDIUM

Key Information:

Vendor: Freeware Advanced Audio Coder Project
Status: Freeware Advanced Audio Coder
Vendor: CVE Published:; 21 June 2017

🔔 Create Freeware Advanced Audio Coder Project Vulnerability Alert

What is CVE-2017-9130?

The faacEncOpen function in Freeware Advanced Audio Coder (FAAC) version 1.28 can be exploited by remote attackers to trigger a denial of service. By sending a specially crafted WAV file, attackers may cause an invalid memory read that leads to application crashes, compromising service availability. This vulnerability poses risks particularly in audio processing scenarios.

References

https://www.exploit-db.com/exploits/42207/

exploitx_refsource_EXPLOIT-DB

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 21, 2017
Vulnerability Reserved
May 21, 2017

JSON