Vulnerability in Media-Libs Libid3tag

CVE-2008-2109

field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.

EPSS: 0.073 (93.7th percentile) — read the EPSS interpretation.

Affected products

References