CVE-2012-1584

Severity

43%

Complexity

86%

Confidentiality

48%

Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation.

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Overview

Type

Scott Wheeler TagLib

First reported 12 years ago

2012-09-06 18:55:00

Last updated 7 years ago

2017-08-29 01:31:00

Affected Software

Scott Wheeler TagLib 1.0

1.0

Scott Wheeler TagLib 1.1

1.1

Scott Wheeler TagLib 1.2

1.2

Scott Wheeler TagLib 1.3

1.3

Scott Wheeler TagLib 1.3.1

1.3.1

Scott Wheeler TagLib 1.4

1.4

Scott Wheeler TagLib 1.5

1.5

Scott Wheeler TagLib 1.6

1.6

Scott Wheeler TagLib 1.6.1

1.6.1

Scott Wheeler TagLib 1.6.2

1.6.2

Scott Wheeler TagLib 1.6.3

1.6.3

References

[pipermail] 20120304 multiple security vulnerabilities in taglib

[pipermail] 20120305 multiple security vulnerabilities in taglib

48211

Vendor Advisory

48792

49688