Red Hat Security AdvisoryRHSA-2008:0271
libvorbis security update
Released 2008-05-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libvorbis-1.0rc2-9.el2, libvorbis-1.0rc2-9.el2.i386, libvorbis-1.0rc2-9.el2.ia64 +2
- Red Hat Enterprise Linux ES version 2.1 libvorbis-1.0rc2-9.el2, libvorbis-1.0rc2-9.el2.i386, libvorbis-devel-1.0rc2-9.el2.i386
- Red Hat Enterprise Linux WS version 2.1 libvorbis-1.0rc2-9.el2, libvorbis-1.0rc2-9.el2.i386, libvorbis-devel-1.0rc2-9.el2.i386
- Red Hat Linux Advanced Workstation 2.1 libvorbis-1.0rc2-9.el2, libvorbis-1.0rc2-9.el2.ia64, libvorbis-devel-1.0rc2-9.el2.ia64
Fixes 4 records
Priority MEDIUM 51
Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08126 · Published 2008-05-16 · Fixed CWE-189
Priority LOW 39
Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.06321 · Published 2008-05-16 · Fixed CWE-189
Priority LOW 27
Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service (crash or infinite loop) or trigger an integer overflow.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04254 · Published 2008-05-16 · Fixed CWE-20
Priority LOW 26
Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during exe…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03512 · Published 2008-05-16 · Fixed
THREATIST.IORead the docs