2469 matches found
CVE-2017-11548
The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...
UBUNTU-CVE-2017-11550
The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...
UBUNTU-CVE-2017-11548
The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...
CVE-2017-11548
The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...
CVE-2017-11550
The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...
CVE-2017-11550
The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...
CVE-2017-11548
CVE-2017-11548 affects Xiph.Org libao 1.2.0; the _tokenize_matrix function in audio_out.c can be triggered by a crafted MP3 to cause memory corruption and denial of service. Affected/libao 1.2.0 is discussed across multiple advisories (e.g., Mageia patch; Debian/Alpine ecosystems) and public expl...
CVE-2017-11551
CVE-2017-11551 affects libid3tag 0.15.1b in several advisories. The vulnerability is in id3_field_parse (field.c) allowing a crafted MP3 to trigger an out-of-memory denial of service. Some sources (e.g., CBLMARINER) indicate versions = 0.16.3-7. Other entries note unpatched status on certain RHEL...
CVE-2017-11551
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
CVE-2017-11550
CVE-2017-11550 affects libid3tag, specifically the id3_ucs4_length function in ucs4.c of version 0.15.1b. The vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted MP3 file. Connected documents indicate the issue impacts ...
CVE-2017-11548
The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...
CVE-2017-11551
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
CVE-2017-11550
The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...
CVE-2017-11548
The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...
CVE-2017-11551
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
PT-2017-12094 · Libid3Tag +2 · Libid3Tag +2
Name of the Vulnerable Software and Affected Versions: libid3tag version 0.15.1b Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL Pointer Dereference and application crash, via a crafted mp3 file. This is due to a problem in the id3 ucs4 length...
LAME Denial of Service Vulnerability (CNVD-2017-20146)
LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in the 'fillbufferresample' function in the libmp3lame/util.c file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer...
CVE-2017-9545
The nexttext function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service buffer over-read via a crafted mp3 file...
