The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service

...

CVE-2008-2109

field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service CPU consumption via an ID3FIELDTYPESTRINGLIST field that ends in '\0', which triggers an infinite loop...