Lucene search

K
freebsdFreeBSDA35F415D-572A-11E5-B0A4-F8B156B6DCC8
HistoryAug 08, 2015 - 12:00 a.m.

vorbis-tools, opus-tools -- multiple vulnerabilities

2015-08-0800:00:00
vuxml.freebsd.org
18

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.04

Percentile

92.2%

Paris Zoumpouloglou reports:

I discovered an integer overflow issue in oggenc,
related to the number of channels in the input WAV file.
The issue triggers an out-of-bounds memory access which
causes oggenc to crash.

Paris Zoumpouloglou reports:

A crafted WAV file with number of channels set to 0
will cause oggenc to crash due to a division by zero
issue.

pengsu reports:

I discovered an buffer overflow issue in oggenc/audio.c
when it tries to open invalid aiff file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchvorbis-tools< 1.4.0_10,3UNKNOWN
FreeBSDanynoarchopus-tools< 0.1.9_2UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.04

Percentile

92.2%