返回 CVE 浏览器

CVE-2018-14332

MEDIUM

5.5

CVSS Severity Score

EPSS Score0.1060%

EPSS Percentile11.46th

Published2018年7月19日

Last Modified2024年11月21日

Vulnerability Description

An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the user opens a malformed mp3 file.

Affected Platforms (CPE)

📦

Clementine Player

Clementine

= 1.3.1

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00038.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00064.html

🔗 https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-14332

🔗 https://github.com/clementine-player/Clementine/blob/e5ab3e786f9adde12cec3cc90cfe8c1cc6b06320/src/moodbar/moodbarpipeline.cpp#L155

🔗 https://github.com/clementine-player/Clementine/issues/6078

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00038.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00064.html

🔗 https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-14332

相关漏洞威胁

CVE-2021-408267.8

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing function...

CVE-2021-408277.8

Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move,...

CVE-2018-409110.0

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Sandbox" component. I...

CVE-2018-1071810.0

Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to...