CVE-2012-1107
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context...
CVE-2012-1107 is a medium vulnerability (CVSS 4.3) in Scott Wheeler Taglib, published September 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile. Fixed in taglib 1.7.1-1.
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
Exploit likelihood
What each source reports
NVD Score used
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
- Record
CVE-2012-1107- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
- Record
CVE-2012-1107- Updated
- 2026-11-02
EUVDEUVD-2012-1141 No score
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
- Record
EUVD-2012-1141- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9c59-3f2v-28rr No score
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context...
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
- Record
GHSA-9c59-3f2v-28rr- Updated
- 2026-11-02
OSV No score
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
- Record
CVE-2012-1107- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1107 No score
The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted sampleRate in an ape file, which triggers a divide-by-zero error.
- Record
DEBIAN-CVE-2012-1107- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/49688
osvdb.org/79814
mail.kde.org/pipermail/taglib-devel/2012-March/002186.html
gentoo.org/security/en/glsa/glsa-201206-16.xml
github.com/taglib/taglib/commit/77d61c6eca4d08b9b025738acf6b926cc750db23
Show 8 moreShow less
securityfocus.com/bid/52284
exchange.xforce.ibmcloud.com/vulnerabilities/73666
openwall.com/lists/oss-security/2012/03/05/19
nvd.nist.gov/vuln/detail/CVE-2012-1107
security-tracker.debian.org/tracker/CVE-2012-1107