Wind River Support Network

HomeDefectsLIN8-8739
Fixed

LIN8-8739 : Security Advisory - libid3tag - CVE-2004-2779

Created: Feb 27, 2018    Updated: Apr 21, 2022
Resolved Date: May 28, 2018
Found In Version: 8.0.0.24
Fix Version: 8.0.0.26
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

https://nvd.nist.gov/vuln/detail/CVE-2004-2779

CVEs


Live chat
Online