CVE-2012-1108
06.09.2012, 18:55
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| scott_wheeler | taglib | 𝑥 ≤ 1.7 |
| scott_wheeler | taglib | 1.0 |
| scott_wheeler | taglib | 1.1 |
| scott_wheeler | taglib | 1.2 |
| scott_wheeler | taglib | 1.3 |
| scott_wheeler | taglib | 1.3.1 |
| scott_wheeler | taglib | 1.4 |
| scott_wheeler | taglib | 1.5 |
| scott_wheeler | taglib | 1.6 |
| scott_wheeler | taglib | 1.6.1 |
| scott_wheeler | taglib | 1.6.2 |
| scott_wheeler | taglib | 1.6.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References