Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2008-1423

Published: 16/05/2008 Updated: 29/09/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Enterprise Linux

Vulnerability Summary

Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and previous versions allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, which triggers a heap overflow.

Vulnerable Product Search on Vulmon Subscribe to Product

xiph.org libvorbis 1.0.0

xiph.org libvorbis 1.1.1

xiph.org libvorbis 1.1.2

xiph.org libvorbis 1.2.0

xiph.org libvorbis 1.0.1

xiph.org libvorbis 1.1.0

Vendor Advisories

Ubuntu Security Notice: libvorbis vulnerabilities
It was discovered that libvorbis did not correctly handle certain malformed sound files If a user were tricked into opening a specially crafted sound file with an application that uses libvorbis, an attacker could execute arbitrary code with the user’s privileges ...
Debian CVElist Bug Report Logs: libvorbisidec: multiple longstanding unfixed security issues in libvorbis
Debian Bug report logs - #669196 libvorbisidec: multiple longstanding unfixed security issues in libvorbis Package: libvorbisidec; Maintainer for libvorbisidec is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Michael Gilbert <mgilbert@debianorg> Date: Wed, 18 Apr 2012 03:21:01 UTC ...
Debian CVElist Bug Report Logs: libvorbis0a: possible integer overflows and DoS attacks
Debian Bug report logs - #482518 libvorbis0a: possible integer overflows and DoS attacks Package: libvorbis0a; Maintainer for libvorbis0a is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for libvorbis0a is src:libvorbis (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@skolelin ...
Debian Security Advisories: DSA-1591-1 libvorbis -- several vulnerabilities
Several local (remote) vulnerabilities have been discovered in libvorbis, a library for the Vorbis general-purpose compressed audio codec The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1419 libvorbis does not properly handle a zero value which allows remote attackers to cause a denial of servi ...

References

CWE-189https://bugzilla.redhat.com/show_bug.cgi?id=440709https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:102http://www.redhat.com/support/errata/RHSA-2008-0270.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0271.htmlhttp://www.securityfocus.com/bid/29206http://www.securitytracker.com/id?1020029http://secunia.com/advisories/30234http://secunia.com/advisories/30237http://secunia.com/advisories/30247http://secunia.com/advisories/30259http://www.debian.org/security/2008/dsa-1591http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.htmlhttp://secunia.com/advisories/30479http://secunia.com/advisories/30820http://secunia.com/advisories/30581http://security.gentoo.org/glsa/glsa-200806-09.xmlhttp://www.ubuntu.com/usn/USN-682-1http://secunia.com/advisories/32946http://www.vupen.com/english/advisories/2008/1510/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42403https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9851https://usn.ubuntu.com/682-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
remote code executionCVE-2024-34909CVE-2024-3317SSTICVE-2024-3400CVE-2024-30051wirelessCVE-2024-4622CVE-2024-4908
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook