← Database

CVE-2010-2937

MEDIUM CVSS: 5.0 Published: 2010-08-20 Modified: 2026-06-16

Description

The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process ID3v2 tags, which allows remote attackers to cause a denial of service (application crash) via a crafted media file.

Affected Platforms

Videolan Vlc Media Player

Weakness Type

CWE-20

References