On 10/07/2009 04:04 PM, Conrad Meyer wrote:
Is it possible that id3lib is 'complete'? The id3 format
isn't extremely
complicated, it may just be a completely finished library. (Keep in mind,
though, that I'm not familiar with the code.)
I suppose it's possible, but even 'finished' software should have bug fixes
and compatibility updates.
As far as being a security risk... it's not a network daemon, and
there's no
reason it should have suid root or anything like that. I imagine the worst you
could do is throw a malformed media file at it.
LOL... makes sense.
Regards,
Lyos Gemini Norezel