CVE Feed

    Dashboard / CVE / CVE-2017-14408

    CVE-2017-14408

    A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service.

    Published:Sep 13, 2017
    Last Modified:Apr 20, 2025
    EPS:Sep 13, 2017
    EPSS Score:0.00435
    CVSS Score:5.5

    Affected Products

    Vendor
    Mp3gain
    Product
    Mp3gain

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2018-10777 (CVSS 7.8) — Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attac…
    CVE-2018-10776 (CVSS 7.8) — The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a deni…
    CVE-2018-10778 (CVSS 7.8) — Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 …
    CVE-2017-14412 (CVSS 7.8) — An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.…
    CVE-2017-14410 (CVSS 5.5) — A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. …
    CVE-2017-14409 (CVSS 7.8) — A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version…
    CVE-2017-14411 (CVSS 7.8) — A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain versio…
    CVE-2017-14406 (CVSS 5.5) — A NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in MP3Gain versi…
    CVE-2017-14407 (CVSS 5.5) — A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2. The v…
    CVE-2017-12912 (CVSS 5.5) — The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High