Divide By Zero

CVE-2017-16890

Medium

5.5/10

Summary

SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be zero.

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: HIGH

CWE-369 - Divide By Zero

The product divides a value by zero.

References

Advisory Timeline

Published Jul 09, 2018