PT-2017-13454

Name of the Vulnerable Software and Affected Versions MP3Gain version 1.5.2 Description A buffer over-read was discovered in the III i stereo function in layer3.c in mpglibDBL, which is used in MP3Gain. This issue causes an application crash, leading to a remote denial of service. Recommendations...

DEBIAN-CVE-2017-9870

The IIIistereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted audio file that is mishandled in the code for the "blocktype == 2" case, a similar...