The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-07-31T13:00:00
Updated: 2024-08-05T18:12:40.350Z
Reserved: 2017-07-22T00:00:00
Link: CVE-2017-11550
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-07-31T13:29:01.503
Modified: 2017-08-02T18:20:53.300
Link: CVE-2017-11550
Redhat