Lucene search

K
freebsdFreeBSD633716FA-1F8F-11DD-B143-0211D880E350
HistoryApr 18, 2008 - 12:00 a.m.

vorbis-tools -- Speex header processing vulnerability

2008-04-1800:00:00
vuxml.freebsd.org
12

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.068 Low

EPSS

Percentile

93.8%

Secunia reports:

A vulnerability has been reported in vorbis-tools,
which can potentially be exploited by malicious people
to compromise a user’s system.
The vulnerability is caused due to an input validation
error when processing Speex headers, which can be
exploited via a specially crafted Speex stream containing
a negative β€œmodeID” field in the header.
Successful exploitation may allow execution of arbitrary
code.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchvorbis-tools<Β 1.2.0_2,3UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.068 Low

EPSS

Percentile

93.8%