Lucene search

K
freebsdFreeBSD40497E81-FEE3-4E54-9D5F-175A5C633B73
HistoryJan 31, 2012 - 12:00 a.m.

libtremor -- memory corruption

2012-01-3100:00:00
vuxml.freebsd.org
20

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.885 High

EPSS

Percentile

98.7%

The Mozilla Project reports:

Security researcher regenrecht reported via
TippingPoint’s Zero Day Initiative the possibility of memory
corruption during the decoding of Ogg Vorbis files. This can
cause a crash during decoding and has the potential for
remote code execution.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibtremor< 1.2.0.s20120120UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.885 High

EPSS

Percentile

98.7%