xiph.org libvorbis 1.1.2 vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and previous versions allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, whi...

Xiph.org Libvorbis 1.0.0 Xiph.org Libvorbis 1.1.1 Xiph.org Libvorbis 1.1.2 Xiph.org Libvorbis 1.2.0 Xiph.org Libvorbis 1.0.1 Xiph.org Libvorbis 1.1.0

4.3

CVSSv2

Xiph.org libvorbis 1.2.0 and previous versions does not properly handle a zero value for codebook.dim, which allows remote malicious users to cause a denial of service (crash or infinite loop) or trigger an integer overflow.

Xiph.org Libvorbis 1.1.0 Xiph.org Libvorbis 1.1.1 Xiph.org Libvorbis 1.0.0 Xiph.org Libvorbis 1.0.1 Xiph.org Libvorbis 1.12 Xiph.org Libvorbis 1.2.0

6.8

CVSSv2

Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and previous versions allows remote malicious users to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.

Xiph.org Libvorbis 1.2.0 Xiph.org Libvorbis 1.0.1 Xiph.org Libvorbis 1.1.0 Xiph.org Libvorbis 1.1.1 Xiph.org Libvorbis 1.12 Xiph.org Libvorbis 1.0.0

4.3

CVSSv2

Multiple buffer overflows in Xiph.Org libvorbis prior to 1.2.0 allow context-dependent malicious users to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by...

Xiph.org Libvorbis

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook