ID:3691 - Exploit for Buffer overflow in lame - CVE-2017-9412

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:3691 - Exploit for Buffer overflow in lame - CVE-2017-9412

ID:3691 - Exploit for Buffer overflow in lame - CVE-2017-9412

Published: August 4, 2020


Vulnerability identifier: #VU33255
Vulnerability risk: Low
CVE-ID: CVE-2017-9412
CWE-ID: CWE-119
Exploitation vector: Local access
Vulnerable software:
lame

Link to public exploit:


Vulnerability description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file.


Remediation

Install update from vendor's website.