240 matches found
CVE-2017-13200
An information disclosure vulnerability in the Android media framework av related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526...
openSUSE Security Update : mpg123 (openSUSE-2017-1035)
This update for mpg123 fixes the following issues : - Update to version 1.25.6 - Hotfix for bug 255: Overflow reading frame data bits in layer II decoding. Now, all-zero data is returned if the frame data is exhausted. This might have a slight impact on performance, but not easily measurable so...
CVE-2017-12797
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow...
CVE-2017-12797
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow...
Integer overflow
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow...
CVE-2017-12797
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow...
DEBIAN-CVE-2017-12797
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow...
UBUNTU-CVE-2017-12797
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow...
CVE-2017-12797
CVE-2017-12797 affects mpg123’s ID3 parser (INT123_parse_new_id3) on 32-bit platforms, where input crafted MP3 metadata can trigger a heap-based buffer overflow and cause denial of service. Public sources corroborate this issue across multiple advisories and OS feeds, with patched versions releas...
CVE-2017-12797
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow...
CVE-2017-12797
Integer overflow in the INT123parsenewid3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which triggers a heap-based buffer overflow...
[SECURITY] Fedora 26 Update: taglib-1.11.1-5.fc26
TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...
ALPINE-CVE-2017-11550
The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...
AZL-7263 CVE-2017-11551 affecting package libid3tag 0.15.1b-33
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
ALPINE-CVE-2017-11551
The id3fieldparse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service OOM via a crafted MP3 file...
PT-2017-12095 · Underbit +2 · Libid3Tag +2
Name of the Vulnerable Software and Affected Versions: libid3tag version 0.15.1b Description: The issue allows remote attackers to cause a denial of service OOM via a crafted MP3 file. This is due to a problem in the id3 field parse function in field.c. Recommendations: For libid3tag version...
Mpg123 Denial of Service Vulnerability
mpg123 is a MPEG audio player and decoding library for Linux and Unix operating systems developed by software developer Michael Hipp. A security vulnerability exists in the 'nexttext' function in the src/libmpg123/id3.c file in mpg123 version 1.24.0. A remote attacker can exploit this vulnerabili...
CVE-2017-9545
The nexttext function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service buffer over-read via a crafted mp3 file...