'libid3tag' Denial of Service Vulnerability
BID:29210
Info
'libid3tag' Denial of Service Vulnerability
| Bugtraq ID: | 29210 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2008-2109 |
| Remote: | Yes |
| Local: | No |
| Published: | May 12 2008 12:00AM |
| Updated: | May 20 2008 04:14PM |
| Credit: | Kentaro Oda |
| Vulnerable: |
Underbit Technologies libid3tag 0.15 b Red Hat Fedora 9 Red Hat Fedora 8 Red Hat Fedora 7 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux |
| Not Vulnerable: | |
Discussion
'libid3tag' Denial of Service Vulnerability
The 'libid3tag' library is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause denial-of-service conditions in applications using a vulnerable version of the library.
The issue affects libid3tag 0.15.0b; other versions may also be vulnerable.
The 'libid3tag' library is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause denial-of-service conditions in applications using a vulnerable version of the library.
The issue affects libid3tag 0.15.0b; other versions may also be vulnerable.
Exploit / POC
'libid3tag' Denial of Service Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
'libid3tag' Denial of Service Vulnerability
Solution:
The vendor has released fixes. Please see the references for more information.
Solution:
The vendor has released fixes. Please see the references for more information.
References
'libid3tag' Denial of Service Vulnerability
References:
References:
- [mad-dev] Initite loop bug in libid3tag-0.15.0b (Kentaro Oda)
- Vendor Homepage (Underbit Technologies)