CVE-2008-2109

Publication date 7 May 2008

Last updated 24 July 2024

Description

field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libid3tag	8.04 LTS hardy	Not affected
	7.10 gutsy	Not affected
	7.04 feisty	Not affected
	6.06 LTS dapper	Not affected

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2008-2109

CVE-2008-2109

Description

Status

References

Other references

Access our resources on patching vulnerabilities