PT-2017-10035

CVE-2016-9266

·

Published

2017-03-03

·

Updated

2018-01-17

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libming version 0.4.7
Description The issue in libming allows remote attackers to have an unspecified impact via a crafted mp3 file. This occurs because the listmp3.c file triggers an invalid left shift when processing the malicious file.
Recommendations For libming version 0.4.7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Weakness enumeration
CWE-189
Related identifiers
CVE-2016-9266
DLA-799-1
MGASA-2017-0070
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com