Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2017-14409

EPSS 1.40% · P81
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-14409

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
MP3Gain mpglibDBL 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MP3Gain是一款MP3文件音量调节应用程序。mpglibDBL是其中的一个MPEG文件解码器。 MP3Gain 1.5.2版本中的mpglibDBL的layer3.c文件的III_dequantize_sample存在缓冲区溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务或可能执行代码(越边界写入)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2017-14409

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-14409

Please Login to view more intelligence information

Same Patch Batch · n/a · 2017-09-13 · 50 CVEs total

CVE-2017-7441Sophos HitmanPro.Alert solution和Sophos Clean SurfRight HitmanPro 安全漏洞
CVE-2017-14406MP3Gain mpglibDBL 安全漏洞
CVE-2017-14411MP3Gain mpglibDBL 缓冲区错误漏洞
CVE-2017-14412MP3Gain mpglibDBL 安全漏洞
CVE-2017-8686Microsoft Windows 安全漏洞
CVE-2017-8696多款Microsoft产品Uniscribe 安全漏洞
CVE-2017-8731Microsoft Windows Edge 安全漏洞
CVE-2017-14410MP3Gain mpglibDBL 安全漏洞
CVE-2017-14402EyesOfNetwork web interface SQL注入漏洞
CVE-2017-14401EyesOfNetwork web interface SQL注入漏洞
CVE-2017-14403EyesOfNetwork web interface SQL注入漏洞
CVE-2017-6008Sophos HitmanPro.Alert solution和Sophos Clean SurfRight HitmanPro 安全漏洞
CVE-2017-6007Sophos HitmanPro.Alert solution和Sophos Clean SurfRight HitmanPro 安全漏洞
CVE-2017-14398Razer Synapse 安全漏洞
CVE-2017-13724Axesstel MU553S 跨站脚本漏洞
CVE-2017-11351Axesstel MU553S 安全漏洞
CVE-2017-11350Axesstel MU553S 跨站请求伪造漏洞
CVE-2017-14124Unicon Software eLux RP 权限许可和访问控制问题漏洞
CVE-2017-12612Apache Spark 安全漏洞
CVE-2017-11462MIT Kerberos 5 安全漏洞

Showing top 20 of 50 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2017-14409

No comments yet


Leave a comment