|
|
| |
|
| |
taglib: multiple vulnerabilities
| Package(s): | taglib |
CVE #(s): | CVE-2012-1108
CVE-2012-1107
CVE-2012-1584
|
| Created: | April 9, 2012 |
Updated: | June 25, 2012 |
| Description: |
From the Red Hat bugzilla [1], [2], [3]:
1) It was reported that, when parsing an Ogg file, a specially crafted Ogg
file with control over the "vendorLength" field could cause a string allocation with that size. Control over the "commentFields", which is the number of times that "commentLength" is read, would allocate a string of size "commandLength", which could cause an application linked to taglib to crash. This has been fixed in upstream git. (CVE-2012-1108)
2) It was reported that a specially crafted ape media file with the sampleRate set to "0" could lead to an application crash due to a division by zero error. This has been fixed in upstream git. (CVE-2012-1107)
3) It was reported that taglib suffers from an integer overflow flaw when
parsing file header fields. A file with a crafted header could cause a large allocation and crash the application. This has been corrected in git. (CVE-2012-1584) |
| Alerts: |
|
( Log in to post comments)
|
|
|