| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
libid3tag: infinite loop
| Package(s): | libid3tag | CVE #(s): | CVE-2008-2109 | |||||||||||||||
| Created: | May 13, 2008 | Updated: | May 20, 2008 | |||||||||||||||
| Description: | From the CVE entry: field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop. | |||||||||||||||||
| Alerts: |
| |||||||||||||||||
(Log in to post comments)