3 matches found
LAME 'id3v2AddAudioDuration' function null pointer reference denial of service vulnerability
LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in the 'id3v2AddAudioDuration' function in the libmp3lame/id3tag.c file in LAME version 3.99.5. An attacker can exploit this vulnerability to cause a denial of service null pointer...
DEBIAN-CVE-2017-13712
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument...
CVE-2017-13712
CVE-2017-13712 is a NULL pointer dereference vulnerability in LAME 3.99.5 (libmp3lame/id3tag.c, id3v2AddAudioDuration) that can cause a Denial of Service. Connected advisories indicate the issue is addressed in later LAME updates (e.g., LAME 3.100) across multiple distributions (openSUSE, Ubuntu ...