CVE-2012-1107
06.09.2012, 18:55
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.Enginsight
| Vendor | Product | Version |
|---|---|---|
| scott_wheeler | taglib | 𝑥 ≤ 1.7 |
| scott_wheeler | taglib | 1.0 |
| scott_wheeler | taglib | 1.1 |
| scott_wheeler | taglib | 1.2 |
| scott_wheeler | taglib | 1.3 |
| scott_wheeler | taglib | 1.3.1 |
| scott_wheeler | taglib | 1.4 |
| scott_wheeler | taglib | 1.5 |
| scott_wheeler | taglib | 1.6 |
| scott_wheeler | taglib | 1.6.1 |
| scott_wheeler | taglib | 1.6.2 |
| scott_wheeler | taglib | 1.6.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References