CVE-2017-14411

Name of the Vulnerable Software and Affected Versions MP3Gain version 1.5.2

Description A stack-based buffer overflow was discovered in the copy mp function in interface.c in mpglibDBL, which is used in MP3Gain. This issue causes an out-of-bounds write, potentially leading to remote denial of service or possibly code execution.

Recommendations For MP3Gain version 1.5.2, consider disabling the copy mp function in interface.c as a temporary workaround until a patch is available. Restrict access to the mpglibDBL library to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.