PT-2023-9339
CVE-2020-18651
·
تاريخ النشر
2023-08-22
·
تاريخ التحديث
2024-08-26
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
exempi versions 2.5.0 and earlier
Description
The issue is related to a Buffer Overflow vulnerability in the
ID3 Support::ID3v2Frame::getFrameValue function. This vulnerability can be exploited by remote attackers to cause a denial of service via the opening of a crafted audio file with an ID3V2 frame. The vulnerability is associated with a buffer overflow in memory, which can be triggered by a specially crafted audio file.Recommendations
For exempi versions 2.5.0 and earlier, consider updating to a version that contains a fix for this issue, as no specific workaround or mitigation measures are provided for these versions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾