CVE-2012-1108
Published Sep 6, 2012
Last updated 7 years ago
Overview
- Description
- The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-20
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F562C2E-4011-40CD-B0D0-2A3F9DBCAB8D",
"versionEndIncluding": "1.7"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C28F20C9-4939-4F4A-96A8-B44B84F20DA2"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11625F29-9539-45ED-8C69-BE49CB3E1640"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D74F6CEA-4FEE-44CD-844A-886E5A6B2D76"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7EE066F-C257-4AE8-81ED-880F0DB35CDB"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3BEFD3D-3091-41B2-93E1-9BB5464455B7"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "403A4D45-BE2E-41DC-971E-6A83B0F44DD4"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C64D253F-DE01-46D0-A1BD-099DF5ABC445"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "062A2172-E47F-43BA-AB6C-E7CE669D2BD8"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34AF2A82-886F-42F5-9841-ECACE1BED7C3"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDBC7873-2E15-44AA-8D31-10394CED96BF"
},
{
"criteria": "cpe:2.3:a:scott_wheeler:taglib:1.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F990984E-7F9F-4DC0-B05D-60F88F8DC947"
}
],
"operator": "OR"
}
]
}
]