113 matches found
PT-2017-12094 · Libid3Tag +2 · Libid3Tag +2
Name of the Vulnerable Software and Affected Versions: libid3tag version 0.15.1b Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL Pointer Dereference and application crash, via a crafted mp3 file. This is due to a problem in the id3 ucs4 length...
PT-2017-12095 · Underbit +2 · Libid3Tag +2
Name of the Vulnerable Software and Affected Versions: libid3tag version 0.15.1b Description: The issue allows remote attackers to cause a denial of service OOM via a crafted MP3 file. This is due to a problem in the id3 field parse function in field.c. Recommendations: For libid3tag version...
The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information
The vulnerability of the libid3tag package up to version 0.15.1b-r2 in the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Mandriva Linux Security Advisory : libid3tag (MDVSA-2008:103)
field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service CPU and memory consumption via an ID3FIELDTYPESTRINGLIST field that ends in '', which triggers an infinite loop. The updated packages have been patched to correct this. %NASLMINLEVEL 70300 C...
Mandriva Update for libid3tag MDVSA-2008:103 (libid3tag)
Check for the Version of libid3tag OpenVAS Vulnerability Test Mandriva Update for libid3tag MDVSA-2008:103 libid3tag Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Mandriva Update for libid3tag MDVSA-2008:103 (libid3tag)
Check for the Version of libid3tag OpenVAS Vulnerability Test Mandriva Update for libid3tag MDVSA-2008:103 libid3tag Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Fedora Update for libid3tag FEDORA-2008-3976
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for libid3tag FEDORA-2008-3976
Check for the Version of libid3tag OpenVAS Vulnerability Test Fedora Update for libid3tag FEDORA-2008-3976 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Fedora Update for libid3tag FEDORA-2008-3757
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for libid3tag FEDORA-2008-3874
Check for the Version of libid3tag OpenVAS Vulnerability Test Fedora Update for libid3tag FEDORA-2008-3874 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Fedora Update for libid3tag FEDORA-2008-3757
Check for the Version of libid3tag OpenVAS Vulnerability Test Fedora Update for libid3tag FEDORA-2008-3757 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Fedora Update for libid3tag FEDORA-2008-3874
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Gentoo Security Advisory GLSA 200805-15 (libid3tag)
The remote host is missing updates announced in advisory GLSA 200805-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200805-15 (libid3tag)
The remote host is missing updates announced in advisory GLSA 200805-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
libid3tag拒绝服务漏洞
BUGTRAQ ID: 29210 CVECAN ID: CVE-2008-2109 libid3tag是MPEG音频解码器MAD中所捆绑的ID3标签操控库。 libid3tag库在解析ID3FIELDTYPESTRINGLIST字段时如果所要解析的数据以\0结尾的话，ptr == 0，但end - ptr条件为1，所以循环会无限继续。 以下是有漏洞的代码段： field.c 2003-04-19 09:14:33.000000000 +0900 --- field-patched.c 2008-01-13 16:08:22.000000000 +0900 291,297 end = p...
Fedora 9 : libid3tag-0.15.1b-6.fc9 (2008-3757)
Fri May 9 2008 Todd Zullinger - 0.15.1b-6 - fix for CVE-2008-2109 445812 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 8 : libid3tag-0.15.1b-5.fc8 (2008-3976)
Fri May 9 2008 Todd Zullinger - 0.15.1b-5 - fix for CVE-2008-2109 445812 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
GLSA-200805-15 : libid3tag: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200805-15 libid3tag: Denial of Service Kentaro Oda reported an infinite loop in the file field.c when parsing an MP3 file with an ID3FIELDTYPESTRINGLIST field that ends in '\0'. Impact : A remote attacker could entice a user to op...
Fedora 7 : libid3tag-0.15.1b-5.fc7 (2008-3874)
Bug 445812 - CVE-2008-2109 libid3tag: infinite loop in ID3FIELDTYPESTRINGLIST parsing Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
