CVE-2017-12797 - Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow

Back Back to CVE browser

MEDIUM

Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow

Published Aug 29, 2017

5.5

MEDIUM

CVSS 3.0

EPSS 1.19%

Description

Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

https://sourceforge.net/p/mpg123/bugs/254/
x_refsource_CONFIRMThird Party Advisory
https://sourceforge.net/p/mpg123/mailman/message/35987663/
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
https://sourceforge.net/p/mpg123/bugs/254/		x_refsource_CONFIRMThird Party Advisory
https://sourceforge.net/p/mpg123/mailman/message/35987663/		x_refsource_CONFIRMThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 29, 2017

Updated Aug 5, 2024

Reserved Aug 10, 2017

Link CVE-2017-12797

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-12797

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-12797