Medium severity5.0NVD Advisory· Published Oct 9, 2017· Updated Jun 17, 2026
CVE-2017-15185
CVE-2017-15185
Description
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:libmp3splt_project:libmp3splt:0.9.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libmp3splt_project:libmp3splt:0.9.2:*:*:*:*:*:*:*
- (no CPE)range: <0.9.2
Patches
Vulnerability mechanics
References
4- seclists.org/fulldisclosure/2017/Jul/82nvdMailing ListNot ApplicableThird Party Advisory
- anonscm.debian.org/cgit/users/ron/mp3splt.git/commit/nvdNot ApplicableThird Party Advisory
- lists.debian.org/debian-lts/2017/09/msg00115.htmlnvdThird Party Advisory
- www.exploit-db.com/exploits/42399/nvdNot ApplicableThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.