CVE Feed

    Dashboard / CVE / CVE-2018-10777

    CVE-2018-10777

    Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

    Published:May 7, 2018
    Last Modified:Nov 21, 2024
    EPS:May 7, 2018
    EPSS Score:0.00301
    CVSS Score:7.8

    Affected Products

    Vendor
    Mp3gain
    Product
    Mp3gain

    Exploits

    No exploit reference

    Related CVEs

    CVE-2018-10776 (CVSS 7.8) — The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a deni…
    CVE-2018-10778 (CVSS 7.8) — Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 …
    CVE-2017-14412 (CVSS 7.8) — An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.…
    CVE-2017-14410 (CVSS 5.5) — A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. …
    CVE-2017-14409 (CVSS 7.8) — A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version…
    CVE-2017-14411 (CVSS 7.8) — A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain versio…
    CVE-2017-14406 (CVSS 5.5) — A NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in MP3Gain versi…
    CVE-2017-14407 (CVSS 5.5) — A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2. The v…
    CVE-2017-14408 (CVSS 5.5) — A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.…
    CVE-2017-12912 (CVSS 5.5) — The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High