5.5
CVSSv3

CVE-2015-9100

Published: 25/06/2017 Updated: 28/06/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.

Vulnerable Product Search on Vulmon Subscribe to Product

lame project lame 3.99.5

Vendor Advisories

The fill_buffer_resample function in utilc in libmp3lamea in LAME before 3100 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file ...