CVE-2015-9101

概要

参考情報

• securityfocus.com/bid/99269 · Third Party Advisory
• blogs.gentoo.org/ago/2017/06/17/lame-heap-based-buffer-overflow-in-fill_buffer_resample-util-c · Third Party Advisory
• bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
• Hack-Me/Pocs_for_Multi_Versions · Exploit

lame のその他の脆弱性

• CVE-2017-15046中 5.5LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a diff…
• CVE-2017-15045中 5.5LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/ut…
• CVE-2017-15019高 7.8LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, be…
• CVE-2017-15018中 5.5LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file…
• CVE-2017-13712高 7.5NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of S…