NVD

Id
43128  
Name
CVE-2012-1107  
Description
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-09-06  
Modified Date
2012-12-18  
Seq
2012-1107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216927 43128 CVE-2012-1107 [pipermail] 20120304 multiple security vulnerabilities in taglib  View
216928 43128 CVE-2012-1107 [pipermail] 20120304 multiple security vulnerabilities in taglib  View
216929 43128 CVE-2012-1107 GLSA-201206-16  View
216930 43128 CVE-2012-1107 [oss-security] 20120305 Re: CVE-Request taglib vulnerabilities  View
216931 43128 CVE-2012-1107 52284  View
216932 43128 CVE-2012-1107 taglib-analyzecurrent-dos(73666)  View
216933 43128 CVE-2012-1107 https://github.com/taglib/taglib/commit/77d61c6eca4d08b9b025738acf6b926cc750db23  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28459 JVNDB-2012-004166 TagLib の ape/apeproperties.cpp の analyzeCurrent 関数におけるサービス運用妨害 (DoS) の脆弱性 TagLib の ape/apeproperties.cpp の analyzeCurrent 関数には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-1107 54345 CVE-2012-1107 43128 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004166.html 2012-09-06 2012-09-11 View