CVE-2017-12797: Buffer Overflow
Published Aug 29, 2017
·Updated
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow.
Affected Software
1 affected component
mpg123 mpg123<=1.25.4
Event History
Aug 29, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12797?
CVE-2017-12797 has a severity rating that indicates it can lead to a denial of service due to a heap-based buffer overflow.
2
How do I fix CVE-2017-12797?
To remedy CVE-2017-12797, upgrade mpg123 to version 1.25.5 or later.
3
Which versions of mpg123 are affected by CVE-2017-12797?
CVE-2017-12797 affects mpg123 versions prior to 1.25.5 on 32-bit platforms.
4
What type of vulnerability is CVE-2017-12797?
CVE-2017-12797 is an integer overflow vulnerability leading to a heap-based buffer overflow.
5
Can CVE-2017-12797 be exploited remotely?
Yes, CVE-2017-12797 can be exploited remotely through a crafted file.