Red Hat Security AdvisoryRHSA-2007:0845
libvorbis security update
Released 2007-09-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libvorbis-1:1.0-8.el3, libvorbis-1:1.0-8.el3.i386, libvorbis-devel-1:1.0-8.el3 +1
- Red Hat Enterprise Linux (v. 5 server) libvorbis-1:1.1.2-3.el5.0, libvorbis-1:1.1.2-3.el5.0.i386, libvorbis-1:1.1.2-3.el5.0.ia64 +5
- Red Hat Enterprise Linux AS version 3 libvorbis-1:1.0-8.el3, libvorbis-1:1.0-8.el3.i386, libvorbis-1:1.0-8.el3.ia64 +5
- Red Hat Enterprise Linux AS version 4 libvorbis-1:1.1.0-2.el4.5, libvorbis-1:1.1.0-2.el4.5.i386, libvorbis-1:1.1.0-2.el4.5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libvorbis-1:1.1.2-3.el5.0, libvorbis-1:1.1.2-3.el5.0.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libvorbis-1:1.1.2-3.el5.0, libvorbis-devel-1:1.1.2-3.el5.0, libvorbis-devel-1:1.1.2-3.el5.0.i386
- Red Hat Enterprise Linux Desktop version 4 libvorbis-1:1.1.0-2.el4.5, libvorbis-1:1.1.0-2.el4.5.i386, libvorbis-devel-1:1.1.0-2.el4.5 +1
- Red Hat Enterprise Linux ES version 3 libvorbis-1:1.0-8.el3, libvorbis-1:1.0-8.el3.i386, libvorbis-1:1.0-8.el3.ia64 +3
- Red Hat Enterprise Linux ES version 4 libvorbis-1:1.1.0-2.el4.5, libvorbis-1:1.1.0-2.el4.5.i386, libvorbis-1:1.1.0-2.el4.5.ia64 +3
- Red Hat Enterprise Linux WS version 3 libvorbis-1:1.0-8.el3, libvorbis-1:1.0-8.el3.i386, libvorbis-1:1.0-8.el3.ia64 +3
- Red Hat Enterprise Linux WS version 4 libvorbis-1:1.1.0-2.el4.5, libvorbis-1:1.1.0-2.el4.5.i386, libvorbis-1:1.1.0-2.el4.5.ia64 +3
Fixes 4 records
Priority LOW 36
lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_0 and (2) blocksize_1…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0314 · Published 2007-07-26 · Fixed CWE-399
Priority LOW 33
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear fu…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01666 · Published 2007-07-26 · Fixed
Priority LOW 24
Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01842 · Published 2007-09-21 · Fixed CWE-119
Priority LOW 23
lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted OGG file, aka trac Changeset 13217.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01675 · Published 2007-09-21 · Fixed
THREATIST.IORead the docs