CVE-2008-2109
libid3tag: infinite loop in ID3_FIELD_TYPE_STRINGLIST parsing
field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.
CVSS 2.0 · 5.0 Medium
EPSS 7.3%
KEV · Not listed
Vendors
Products