mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corruption seen in a crash in the mad_decoder_run function in decoder.c in libmad) via a crafted MP3 file.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2017/Jul/94 | Exploit Mailing List Third Party Advisory |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870406 | |
https://www.exploit-db.com/exploits/42409/ |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2017-08-01T13:00:00
Updated: 2018-01-08T07:57:01
Reserved: 2017-07-22T00:00:00
Link: CVE-2017-11552
JSON object: View
NVD Information
Status : Modified
Published: 2017-08-01T13:29:00.187
Modified: 2018-01-09T02:29:05.363
Link: CVE-2017-11552
JSON object: View
Redhat Information
No data.
CWE