CVE-2012-1107

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.

Affected Software

Name	Vendor	Start Version	End Version
Taglib	Scott_wheeler	*	1.7 (including)
Taglib	Scott_wheeler	1.0 (including)	1.0 (including)
Taglib	Scott_wheeler	1.1 (including)	1.1 (including)
Taglib	Scott_wheeler	1.2 (including)	1.2 (including)
Taglib	Scott_wheeler	1.3 (including)	1.3 (including)
Taglib	Scott_wheeler	1.3.1 (including)	1.3.1 (including)
Taglib	Scott_wheeler	1.4 (including)	1.4 (including)
Taglib	Scott_wheeler	1.5 (including)	1.5 (including)
Taglib	Scott_wheeler	1.6 (including)	1.6 (including)
Taglib	Scott_wheeler	1.6.1 (including)	1.6.1 (including)
Taglib	Scott_wheeler	1.6.2 (including)	1.6.2 (including)
Taglib	Scott_wheeler	1.6.3 (including)	1.6.3 (including)
Taglib	Ubuntu	hardy	*
Taglib	Ubuntu	lucid	*
Taglib	Ubuntu	maverick	*
Taglib	Ubuntu	natty	*
Taglib	Ubuntu	oneiric	*
Taglib	Ubuntu	precise	*
Taglib	Ubuntu	quantal	*
Taglib	Ubuntu	raring	*
Taglib	Ubuntu	saucy	*
Taglib	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-1107
CWE	https://cwe.mitre.org/data/definitions/.html

Affected Software

References