PT-2023-9339

CVE-2020-18651

·

تاريخ النشر

2023-08-22

·

تاريخ التحديث

2024-08-26

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions exempi versions 2.5.0 and earlier
Description The issue is related to a Buffer Overflow vulnerability in the ID3 Support::ID3v2Frame::getFrameValue function. This vulnerability can be exploited by remote attackers to cause a denial of service via the opening of a crafted audio file with an ID3V2 frame. The vulnerability is associated with a buffer overflow in memory, which can be triggered by a specially crafted audio file.
Recommendations For exempi versions 2.5.0 and earlier, consider updating to a version that contains a fix for this issue, as no specific workaround or mitigation measures are provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALSA-2024:3066
CESA-2024_3066
DLA-3585-1
INFSA-2024_3066
OESA-2023-1690
OPENSUSE-SU-2023_3833-1
RHSA-2024:3066
RHSA-2024_3066
RLSA-2024:3066
SUSE-SU-2023:3734-1
SUSE-SU-2023_3734-1
SUSE-SU-2023:3833-1
SUSE-SU-2023_3833-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾