| ID |
CVE-2012-1584
|
| Summary |
Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted file header field in a media file, which triggers a large memory allocation. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:scott_wheeler:taglib:1.0:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.0:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.1:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.1:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.2:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.2:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.3:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.3:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.3.1:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.4:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.4:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.5:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.5:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.6:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.6:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.6.1:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.6.2:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.6.2:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.6.3:*:*:*:*:*:*:*
-
cpe:2.3:a:scott_wheeler:taglib:1.7:*:*:*:*:*:*:*
cpe:2.3:a:scott_wheeler:taglib:1.7:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 4.3 (as of 29-08-2017 - 01:31) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-189 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
| refmap
via4
|
| bid | 52290 | | confirm | https://github.com/taglib/taglib/commit/dcdf4fd954e3213c355746fa15b7480461972308 | | gentoo | GLSA-201206-16 | | mlist | - [oss-security] 20120305 Re: CVE-Request taglib vulnerabilities
- [oss-security] 20120321 Re: CVE-Request taglib vulnerabilities
- [oss-security] 20120326 Re: CVE-Request taglib vulnerabilities
- [pipermail] 20120304 multiple security vulnerabilities in taglib
- [pipermail] 20120305 multiple security vulnerabilities in taglib
| | secunia | | | xf | taglib-mid-dos(78909) |
|
| Last major update |
29-08-2017 - 01:31 |
| Published |
06-09-2012 - 18:55 |
| Last modified |
29-08-2017 - 01:31 |
