NVD

Id
43129  
Name
CVE-2012-1108  
Description
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-09-06  
Modified Date
2012-12-18  
Seq
2012-1108  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216934 43129 CVE-2012-1108 [pipermail] 20120304 multiple security vulnerabilities in taglib  View
216935 43129 CVE-2012-1108 [pipermail] 20120305 multiple security vulnerabilities in taglib  View
216936 43129 CVE-2012-1108 GLSA-201206-16  View
216937 43129 CVE-2012-1108 [oss-security] 20120305 Re: CVE-Request taglib vulnerabilities  View
216938 43129 CVE-2012-1108 52284  View
216939 43129 CVE-2012-1108 taglib-parse-dos(73665)  View
216940 43129 CVE-2012-1108 https://github.com/taglib/taglib/commit/b3646a07348ffa276ea41a9dae03ddc63ea6c532  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28460 JVNDB-2012-004167 TagLib の ogg/xiphcomment.cpp の parse 関数におけるサービス運用妨害 (DoS) の脆弱性 TagLib の ogg/xiphcomment.cpp の parse 関数には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2012-1108 54346 CVE-2012-1108 43129 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004167.html 2012-09-06 2012-09-11 View