medium6.5Public exploit code
CVE-2017-11552
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- libmad 0.15.1b - 'mp3' Memory Corruption2017-08-01 · dos · linux
Impact
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corruption seen in a crash in the mad_decoder_run function in decoder.c in libmad) via a crafted MP3 file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Underbit | Mad Libmad | Version 0.15.1b |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2017/Jul/94
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870406
- https://www.exploit-db.com/exploits/42409/
- http://seclists.org/fulldisclosure/2017/Jul/94
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870406
- https://www.exploit-db.com/exploits/42409/