Back to search
CVE-2008-2109
Published: May 7, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
MDVSA-2008:103
vendor-advisory
x_refsource_MANDRIVA
GLSA-200805-15
vendor-advisory
x_refsource_GENTOO
FEDORA-2008-3757
vendor-advisory
x_refsource_FEDORA
30173
third-party-advisory
x_refsource_SECUNIA
30182
third-party-advisory
x_refsource_SECUNIA
http://bugs.gentoo.org/show_bug.cgi?id=210564
x_refsource_CONFIRM
29210
vdb-entry
x_refsource_BID
[mad-dev] 20080112 Initite loop bug in libid3tag-0.15.0b
mailing-list
x_refsource_MLIST
libid3tag-field-dos(42271)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now