CVE-2012-1108
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to...
CVE-2012-1108 is a medium vulnerability (CVSS 4.3) in Scott Wheeler Taglib, published September 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.10%, the 87th percentile. Fixed in taglib 1.7.1-1.
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
Exploit likelihood
What each source reports
NVD Score used
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
- Record
CVE-2012-1108- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
- Record
CVE-2012-1108- Updated
- 2026-11-02
EUVDEUVD-2012-1142 No score
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
- Record
EUVD-2012-1142- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3gr9-x3xp-765c No score
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to...
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
- Record
GHSA-3gr9-x3xp-765c- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
- Record
CVE-2012-1108- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1108 No score
The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted vendorLength field in an ogg file.
- Record
DEBIAN-CVE-2012-1108- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/49688
osvdb.org/79813
github.com/taglib/taglib/commit/b3646a07348ffa276ea41a9dae03ddc63ea6c532
mail.kde.org/pipermail/taglib-devel/2012-March/002186.html
gentoo.org/security/en/glsa/glsa-201206-16.xml
Show 8 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/73665
securityfocus.com/bid/52284
openwall.com/lists/oss-security/2012/03/05/19
nvd.nist.gov/vuln/detail/CVE-2012-1108
security-tracker.debian.org/tracker/CVE-2012-1108