1350 matches found
CVE-2017-12678
TagLib 1.11.1 contains a vulnerability in rebuildAggregateFrames within id3v2framefactory.cpp that can be triggered by a crafted audio file, enabling remote denial of service and potentially other impact. Affected component: TagLib, specifically the id3v2framefactory.cpp path. Root cause: pointer...
CVE-2017-12678
In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...
Xiph.Org libao '_tokenize_matrix' function denial of service vulnerability
Xiph.Org libao is a cross-platform audio library capable of outputting audio on a variety of different platforms. A security vulnerability exists in the 'tokenizematrix' function of the audioout.c file in Xiph.Org libao version 1.2.0. A remote attacker can exploit this vulnerability to cause a...
libid3tag 'id3_field_parse' Function Denial of Service Vulnerability
libid3tag is the ID3 tag manipulation library bundled with the MPEG audio decoder MAD. A security vulnerability exists in the 'id3fieldparse' function of the field.c file in libid3tag version 0.15.1b. A remote attacker can exploit this vulnerability to cause a denial of service via a specially...
gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps
The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...
gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps
The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...
UBUNTU-CVE-2017-11552
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service memory corruption seen in a crash in the maddecoderrun function in decoder.c in libmad via a crafted MP3 file...
DEBIAN-CVE-2017-11552
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service memory corruption seen in a crash in the maddecoderrun function in decoder.c in libmad via a crafted MP3 file...
ALPINE-CVE-2017-11552
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service memory corruption seen in a crash in the maddecoderrun function in decoder.c in libmad via a crafted MP3 file...
AZL-7263 CVE-2017-11551 affecting package libid3tag 0.15.1b-33
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
DEBIAN-CVE-2017-11551
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
AZL-7262 CVE-2017-11550 affecting package libid3tag 0.15.1b-33
The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...
AZL-36952 CVE-2017-11551 affecting package libid3tag for versions less than 0.16.3-7
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
AZL-12122 CVE-2017-11548 affecting package libao 1.2.0-24
The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...
UBUNTU-CVE-2017-11551
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
CVE-2017-11548
The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...
Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities
Exploit for linux platform in category dos / poc Sound eXchange SoX multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio...
Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities
Sound eXchange SoX multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply...
PT-2017-12095 · Underbit +2 · Libid3Tag +2
Name of the Vulnerable Software and Affected Versions: libid3tag version 0.15.1b Description: The issue allows remote attackers to cause a denial of service OOM via a crafted MP3 file. This is due to a problem in the id3 field parse function in field.c. Recommendations: For libid3tag version...