Azure Linux 3.0 Security Update: libid3tag (CVE-2004-2779)

The version of libid3tag installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2004-2779 advisory. - id3utf16deserialize in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an...

libid3tag Denial of Service Vulnerability (CNVD-2018-06079)

libid3tag is the ID3 tag manipulation library bundled with the MPEG audio decoder MAD. A security vulnerability exists in the 'id3utf16deserialize' function of the utf16.c file in libid3tag 0.15.1b and earlier versions, which stems from a program that fails to correctly parse ID3v2 tags encoded i...