id3lib ID3 Tags - Buffer Overflow

// source: https://www.securityfocus.com/bid/26945/info The 'id3lib' library is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application or to crash the application, denying further...

SuSE 10 Security Update : id3lib (ZYPP Patch Number 4317)

This update fixes a bug that allows local attackers to overwrite arbitrary files. CVE-2007-4460 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29462;...

Fedora 7 : id3lib-3.8.3-17.fc7 (2007-1774)

This security update fixes a minor tempfile creation security issue CVE-2007-4460 by using mkstemp bugzilla 253553 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

openSUSE 10 Security Update : id3lib (id3lib-4316)

This update fixes a bug that allows local attackers to overwrite arbitrary files. CVE-2007-4460 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update id3lib-4316. The text description of this plugin...

FreeBSD : id3lib -- insecure temporary file creation (15ec9123-7061-11dc-b372-001921ab2fa4)

Debian Bug report log reports : When tagging file $foo, a temporary copy of the file is created, and for some reason, libid3 doesn't use mkstemp but just creates $foo.XXXXXX literally, without any checking. This would silently truncate and overwrite an existing $foo.XXXXXX. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 1365-3] New id3lib3.8.3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1365-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff, Dann Frazier October 2nd, 2007 http://www.debian.org/security/faq - -...

DSA-1365-3 id3lib3.8.3 - denial of service

Bulletin has no description...

GLSA-200709-08 : id3lib: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200709-08 id3lib: Insecure temporary file creation Nikolaus Schulz discovered that the function RenderV2ToFile in file src/tagfile.cpp creates temporary files in an insecure manner. Impact : A local attacker could exploit this...

id3lib: Insecure temporary file creation

Background id3lib is an open-source, cross-platform software development library for reading, writing, and manipulating ID3v1 and ID3v2 tags. Description Nikolaus Schulz discovered that the function RenderV2ToFile in file src/tagfile.cpp creates temporary files in an insecure manner. Impact A loc...

Mandrake Linux Security Advisory : id3lib (MDKSA-2007:180)

A programming error was found in id3lib by Nikolaus Schulz that could lead to a denial of service through symlink attacks. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

id3lib symbolic links security vulnerability

No description provided...

[SECURITY] [DSA 1365-2] New id3lib3.8.3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1365-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 9th, 2007 http://www.debian.org/security/faq -...

DSA-1365-2 id3lib3.8.3 - denial of service

Bulletin has no description...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2007-4460

CVE-2007-4460 affects id3lib (libid3) 3.8.3. The RenderV2ToFile function in tag_file.cpp allows a local attacker to overwrite arbitrary files via a symlink attack on a temporary file named from the target file. Impact is local confidentiality, integrity, and availability are at risk. Several advi...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...