CVE-2017-11550 - libid3tag: NULL Pointer Dereference in id3_ucs4_length function in ucs4.c

Back Back to CVE browser

MEDIUM

libid3tag: NULL Pointer Dereference in id3_ucs4_length function in ucs4.c

Published Jul 31, 2017

5.5

MEDIUM

CVSS 3.0

EPSS 1.45%

Description

The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.

Affected products

Red Hat Enterprise Linux 6

libid3tag

Will not fix
Red Hat Enterprise Linux 7

libid3tag

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	libid3tag	Will not fix	n/a
Red Hat Enterprise Linux 7	libid3tag	Will not fix	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-476

NULL Pointer Dereference

References (5)

http://seclists.org/fulldisclosure/2017/Jul/85
x_refsource_MISCMailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2017-11550
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1478934
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2017-11550
https://www.cve.org/CVERecord?id=CVE-2017-11550

Link	Providers	Tags
http://seclists.org/fulldisclosure/2017/Jul/85		x_refsource_MISCMailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2017-11550		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1478934		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2017-11550
https://www.cve.org/CVERecord?id=CVE-2017-11550