LAME Denial of Service Vulnerability (CNVD-2017-20146)

LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in the 'fillbufferresample' function in the libmp3lame/util.c file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer...

LAME fill_buffer_resample function denial of service vulnerability

LAME is an open source MP3 audio compression software. A security vulnerability in the LAME libmp3lame.a/util.c/fillbufferresample function allows remote attackers to exploit the vulnerability by submitting a special file that induces the user to parse it, which can crash the application...

LAME fill_buffer_resample function heap buffer overflow vulnerability

LAME is an open source MP3 audio compression software. A heap buffer overflow vulnerability exists in the LAME libmp3lame.a/util.c/fillbufferresample function, which allows remote attackers to exploit the vulnerability by submitting a special file and tricking the user into parsing it, which can...

ALPINE-CVE-2015-9100

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

CVE-2015-9101

CVE-2015-9101 affects LAME vulnerable in fill_buffer_resample (libmp3lame/util.c); a crafted audio file can trigger a heap-based buffer over-read and application crash (DoS). Patches exist in newer LAME releases (e.g., 3.100 per openSUSE/SUSE advisories); no exploitation details are provided in t...

PT-2017-7548 · Lame +3 · Lame +3

Name of the Vulnerable Software and Affected Versions: LAME versions 3.98 through 3.99.5 Description: The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted audio file. This is due to a problem in the fill...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

DEBIAN-CVE-2017-7742

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7741

CVE-2017-7741 affects libsndfile prior to 1.0.28. The flaw is in flac_buffer_copy() (flac.c) and can cause a segmentation fault with write memory access during a resample of a specially crafted FLAC file, similar to CVE-2017-7585. Connected sources confirm the vulnerability in libsndfile and reco...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7742

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7742

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

UBUNTU-CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

Libav 'resample.c' heap buffer overflow vulnerability

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A heap buffer overflow vulnerability exists in Libav version 11.3. The vulnerability stems from the program failing to perform proper boundary...

Pillow 'ImagingResampleHorizontal' function heap buffer overflow vulnerability

Python Image Library PIL is a Python image processing library developed by Swiss software developer Fredrik Lundh. Pillow is a compiled version of PIL with some bug fixes developed by American software developer Alex Clark. The ImagingResampleHorizontal function in the libImaging/Resample.c file ...

UBUNTU-CVE-2016-4009

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow...

Update Protection against HP Photo Creative audio.Record ActiveX Stack Buffer Overflow

A buffer overflow vulnerability exists in HP Photo Creative ActiveX control. The vulnerability is due to a boundary error in ContentMan.dll while parsing arguments passed to the Resample function of the audio.Record ActiveX control. Remote attackers could exploit this vulnerability by enticing th...

HP Photo Creative audio.Record ActiveX Stack Buffer Overflow

HP Photo Creative is free software offered by HP. It allows users to create photo books, calendars, and collages which can be printed or shipped to the user. A buffer overflow vulnerability has been reported in HP Photo Creative ActiveX control. The vulnerability is due to a boundary error in...