Red Hat Security AdvisoryRHSA-2007:0912
libvorbis security update
Released 2007-10-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libvorbis-1.0rc2-7.el2, libvorbis-1.0rc2-7.el2.i386, libvorbis-1.0rc2-7.el2.ia64 +2
- Red Hat Enterprise Linux ES version 2.1 libvorbis-1.0rc2-7.el2, libvorbis-1.0rc2-7.el2.i386, libvorbis-devel-1.0rc2-7.el2.i386
- Red Hat Enterprise Linux WS version 2.1 libvorbis-1.0rc2-7.el2, libvorbis-1.0rc2-7.el2.i386, libvorbis-devel-1.0rc2-7.el2.i386
- Red Hat Linux Advanced Workstation 2.1 libvorbis-1.0rc2-7.el2, libvorbis-1.0rc2-7.el2.ia64, libvorbis-devel-1.0rc2-7.el2.ia64
Fixes 4 records
Priority LOW 36
lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_0 and (2) blocksize_1…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0314 · Published 2007-07-26 · Fixed CWE-399
Priority LOW 33
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear fu…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01666 · Published 2007-07-26 · Fixed
Priority LOW 24
Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01842 · Published 2007-09-21 · Fixed CWE-119
Priority LOW 23
lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted OGG file, aka trac Changeset 13217.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01675 · Published 2007-09-21 · Fixed
THREATIST.IORead the docs