Lucene search
AmazonALAS-2012-047HistoryMar 04, 2012 - 4:07 p.m.
Important: libvorbis
2012-03-0416:07:00
alas.aws.amazon.com
29
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.885
Percentile
98.7%
Issue Overview:
A heap-based buffer overflow flaw was found in the way the libvorbis library parsed Ogg Vorbis media files. If a specially-crafted Ogg Vorbis media file was opened by an application using libvorbis, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2012-0444)
Affected Packages:
libvorbis
Issue Correction:
Run yum update libvorbis to update your system.
New Packages:
i686:
libvorbis-debuginfo-1.2.3-4.6.amzn1.i686
libvorbis-1.2.3-4.6.amzn1.i686
libvorbis-devel-1.2.3-4.6.amzn1.i686
noarch:
libvorbis-devel-docs-1.2.3-4.6.amzn1.noarch
src:
libvorbis-1.2.3-4.6.amzn1.src
x86_64:
libvorbis-debuginfo-1.2.3-4.6.amzn1.x86_64
libvorbis-1.2.3-4.6.amzn1.x86_64
libvorbis-devel-1.2.3-4.6.amzn1.x86_64
Additional References
Red Hat: CVE-2012-0444
Mitre: CVE-2012-0444
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | libvorbis-debuginfo | < 1.2.3-4.6.amzn1 | libvorbis-debuginfo-1.2.3-4.6.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | libvorbis | < 1.2.3-4.6.amzn1 | libvorbis-1.2.3-4.6.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | libvorbis-devel | < 1.2.3-4.6.amzn1 | libvorbis-devel-1.2.3-4.6.amzn1.i686.rpm |
| Amazon Linux | 1 | noarch | libvorbis-devel-docs | < 1.2.3-4.6.amzn1 | libvorbis-devel-docs-1.2.3-4.6.amzn1.noarch.rpm |
| Amazon Linux | 1 | x86_64 | libvorbis-debuginfo | < 1.2.3-4.6.amzn1 | libvorbis-debuginfo-1.2.3-4.6.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | libvorbis | < 1.2.3-4.6.amzn1 | libvorbis-1.2.3-4.6.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | libvorbis-devel | < 1.2.3-4.6.amzn1 | libvorbis-devel-1.2.3-4.6.amzn1.x86_64.rpm |
Related
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-07) - Linux
2021-11-16 00:00:00
Ubuntu Update for libvorbis USN-1370-1
2012-02-21 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-47)
2015-09-08 00:00:00
nessus
nessus
Debian DSA-2412-1 : libvorbis - buffer overflow
2012-02-20 00:00:00
SuSE 11.1 Security Update : libvorbis (SAT Patch Number 5851)
2012-03-02 00:00:00
openSUSE Security Update : libvorbis (openSUSE-SU-2012:0319-1)
2014-06-13 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2012-07
2012-02-03 00:00:00
[SECURITY] [DSA 2412-1] libvorbis security update
2012-02-22 00:00:00
libvorbis library buffer overflow
2012-02-22 00:00:00
zdi
zdi
centos
centos
libvorbis security update
2012-02-15 09:08:27
firefox, xulrunner security update
2012-02-01 03:34:27
nvd
nvd
CVE-2012-0444
2012-02-01 16:55:01
cve
cve
CVE-2012-0444
2012-02-01 16:55:01
suse
suse
libvorbis: fixed a heap based buffer overflow (important)
2012-03-01 23:08:28
Security update for libvorbis (important)
2012-03-06 23:08:25
Security update for Mozilla XULrunner (important)
2012-02-09 19:07:25
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:07:20
oraclelinux
oraclelinux
libvorbis security update
2012-02-15 00:00:00
libvorbis security update
2018-04-05 00:00:00
firefox security update
2012-01-31 00:00:00
cvelist
cvelist
CVE-2012-0444
2012-02-01 16:00:00
debiancve
debiancve
CVE-2012-0444
2012-02-01 16:55:01
prion
prion
Memory corruption
2012-02-01 16:55:00
ubuntu
ubuntu
libvorbis vulnerability
2012-02-20 00:00:00
Thunderbird vulnerabilities
2012-02-08 00:00:00
Xulrunnner vulnerabilities
2012-02-08 00:00:00
mozilla
mozilla
Potential Memory Corruption When Decoding Ogg Vorbis files — Mozilla
2012-01-31 00:00:00
checkpoint_advisories
checkpoint_advisories
ubuntucve
ubuntucve
CVE-2012-0444
2012-02-01 00:00:00
debian
debian
[SECURITY] [DSA 2412-1] libvorbis security update
2012-02-19 20:23:13
[SECURITY] [DSA 2406-1] icedove security update
2012-02-09 12:07:23
[SECURITY] [DSA 2402-1] iceape security update
2012-02-02 19:53:30
redhat
redhat
(RHSA-2012:0136) Important: libvorbis security update
2012-02-15 00:00:00
(RHSA-2012:0079) Critical: firefox security update
2012-01-31 00:00:00
(RHSA-2012:0422) Moderate: rhev-hypervisor6 security and bug fix update
2012-03-26 00:00:00
freebsd
freebsd
libtremor -- memory corruption
2012-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: libvorbis-1.3.3-1.fc16
2012-02-17 00:57:43
osv
osv
iceweasel - several
2012-02-02 00:00:00
iceape - several
2012-02-02 00:00:00
icedove - several
2012-02-09 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.885
Percentile
98.7%
Related for ALAS-2012-047