medium5.5
CVE-2019-18359
A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2.
Impact
A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Glensawyer | Mp3gain | Version 1.6.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00030.html
- https://sourceforge.net/p/mp3gain/bugs/46/
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00030.html
- https://sourceforge.net/p/mp3gain/bugs/46/