CVE-2008-3567

CVE-2008-3567 affects Winamp before 5.541: cross-zone scripting via the NowPlaying feature allows XSS through an MP3 file with JavaScript in id3 tags. Vulnerable component is Winamp’s NowPlaying metadata handling; root cause is unsanitized id3 tag content rendered by the embedded browser. Observe...

libid3tag拒绝服务漏洞

BUGTRAQ ID: 29210 CVECAN ID: CVE-2008-2109 libid3tag是MPEG音频解码器MAD中所捆绑的ID3标签操控库。 libid3tag库在解析ID3FIELDTYPESTRINGLIST字段时如果所要解析的数据以\0结尾的话，ptr == 0，但end - ptr条件为1，所以循环会无限继续。 以下是有漏洞的代码段： field.c 2003-04-19 09:14:33.000000000 +0900 --- field-patched.c 2008-01-13 16:08:22.000000000 +0900 291,297 end = p...

[SECURITY] Fedora 8 Update: libid3tag-0.15.1b-5.fc8

libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...

[SECURITY] Fedora 7 Update: libid3tag-0.15.1b-5.fc7

libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...

libid3tag: Denial of service

Background libid3tag is an ID3 tag manipulation library. Description Kentaro Oda reported an infinite loop in the file field.c when parsing an MP3 file with an ID3FIELDTYPESTRINGLIST field that ends in '\0'. Impact A remote attacker could entice a user to open a specially crafted MP3 file, possib...

[SECURITY] Fedora 9 Update: libid3tag-0.15.1b-6.fc9

libid3tag is a library for reading and eventually writing ID3 tags, both ID3v1 and the various versions of ID3v2...

PT-2008-1134 · Underbit Technologies +1 · Libid3Tag +1

Name of the Vulnerable Software and Affected Versions: libid3tag versions 0.15.0b through 0.15.1b-r1 libid3tag version 0.15.1b-r2 is not affected, so the range is up to 0.15.1b-r1 Description: The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption,...

id3lib ID3标签远程溢出漏洞

BUGTRAQ ID: 26945 id3lib是用于处理音频文件中ID3标签的函数库。 id3lib库在处理畸形格式的数据时存在漏洞，远程攻击者可能利用此漏洞诱使用户处理恶意文件控制用户系统。 id3lib的extflags数组只有1个单元的大小，但extflagbytes可支持0到255个单元。因此，extflagbytes为0会导致崩溃，因为之后的指令会认为extflags0已初始化，使用较大的值就会溢出这个数组。 headertag.cpp中代码如下： void ID3TagHeader::ParseExtendedID3Reader& reader ... const int...

Array overflow in id3lib (devel CVS)

Luigi Auriemma Application: id3lib http://id3lib.sourceforge.net Versions: only devel CVS stable 3.8.3 is NOT affected Platforms: Windows, nix and Mac Bug: array overflow Exploitation: local Date: 19 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug...

DSA-1365-3 id3lib3.8.3 - denial of service

Bulletin has no description...

DSA-1365-1 id3lib3.8.3

Bulletin has no description...

DEBIAN-CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2006-3324

The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine ioquake3 before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory fshomepath cvar via a long string of filenames, as contained in the neededpaks buffer...

CVE-2006-3325

The CVE affects the client component (cl_parse.c) of the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier. The flaw allows remote servers to send a sequence of cvar names/values that can overwrite write-protected client cvars, such as cl_allowdownload (A...

CVE-2006-3324

The CVE-2006-3324 entry describes a remote arbitrary-file overwrite vulnerability in the id3 Quake 3 Engine and ioquake3 (ioquake3) before revision 804, exploitable via the Automatic Downloading option by sending a long string of filenames contained in the neededpaks buffer. The underlying issue ...

mpg321 MP3 player ID3 tags format string vulnerability

Format string bug on IDv3 tags processing...

mpg321: Format string vulnerability

Background mpg321 is a GPL replacement for mpg123, a command line audio player with support for ID3. ID3 is a tagging system that allows metadata to be embedded within media files. Description A routine security audit of the mpg321 package revealed a known security issue remained unpatched. The...

[Full-disclosure] [ GLSA 200503-34 ] mpg321: Format string vulnerability

Gentoo Linux Security Advisory GLSA 200503-34 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2003-1091

Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed ID3 tags in MP3 files...

CVE-2003-1091

CVE-2003-1091 : Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via malformed ID3 tags in MP3 files. Affected: MP3Broadcaster component within the QuickTime/Dar...