PT-2017-13451
CVE-2017-14408
·
تاريخ النشر
2017-09-13
·
تاريخ التحديث
2018-08-10
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
MP3Gain version 1.5.2
Description
A stack-based buffer over-read was discovered in the
dct36 function in layer3.c in mpglibDBL, which is used in MP3Gain. This issue causes an application crash, leading to a remote denial of service.Recommendations
For MP3Gain version 1.5.2, consider disabling the
dct36 function in layer3.c as a temporary workaround to prevent the application crash until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾