ID:3788 - Exploit for Stack-based buffer overflow in lame - CVE-2017-9872

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a when processing a crafted audio file. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation