lib32-libid3tag

Link package | bugs open | bugs closed | Wiki | GitHub | web search
Description library for id3 tagging, lib32.
Version 0.15.1b-2 [multilib]

Resolved

Group Affected Fixed Severity Status Ticket
AVG-633 0.15.1a-1 0.15.1b-1 Medium Fixed FS#57601
Issue Group Severity Remote Type Description
CVE-2017-11551 AVG-633 Medium Yes Denial of service
The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file.
CVE-2017-11550 AVG-633 Medium Yes Denial of service
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application...
CVE-2008-2109 AVG-633 Medium Yes Denial of service
field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST...
CVE-2004-2779 AVG-633 Medium Yes Denial of service
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless...