swftools Out-of-Bounds Read Vulnerability in wav2swf Component

A global buffer overflow vulnerability has been identified in swftools versions through 0.9.2. This issue resides in the wav2swf component, specifically within the wav_convert2mono function of the lib/wav.c file. The vulnerability allows for an out-of-bounds read, which could be exploited locally, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a global buffer overflow, which can disrupt the normal operation of the application, likely leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by compiling swftools with Clang, using the AddressSanitizer to detect memory errors. After compiling the tool, it can be run with a specially crafted WAV file that triggers the out-of-bounds read. The AddressSanitizer will report the buffer overflow error, indicating that the vulnerability has been successfully exploited.