CVE-2017-14410

CVE-2017-14410 describes a buffer over-read vulnerability in the III_i_stereo function within mpglibDBL, specifically affecting MP3Gain version 1.5.2. This flaw can lead to an application crash, resulting in a remote denial of service. The vulnerability is rated Medium severity (CVSS 5.5) with a low attack complexity, requiring user interaction (e.g., opening a malicious MP3 file) and local access to trigger. Its primary impact is denial of service, with no confidentiality or integrity impacts. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The CVE has received minimal community discussion and media coverage, indicating low public awareness and a lack of widespread attention.