Описание
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.4.14.1 (включая)
cpe:2.3:a:un4seen:bass:*:*:*:*:*:windows:*:*
EPSS
Процентиль: 53%
0.00299
Низкий
6.5 Medium
CVSS3
7.1 High
CVSS2
Дефекты
CWE-835
Связанные уязвимости
github
больше 3 лет назад
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive.
EPSS
Процентиль: 53%
0.00299
Низкий
6.5 Medium
CVSS3
7.1 High
CVSS2
Дефекты
CWE-835