PT-2016-1712

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions prior to 2.2.0 Description The issue is related to a buffer overflow in the AStreamPeekStream function, which can be exploited by remote attackers to cause a denial of service crash via a crafted wav file. Th...

openSUSE Security Update : snack (openSUSE-2015-183)

snack was updated to fix one security issue. This security issue was fixed : - CVE-2012-6303: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allowed remote attackers to cause a denial of service crash and...

Security update for snack (important)

snack was updated to fix one security issue. This security issue was fixed: - CVE-2012-6303: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allowed remote attackers to cause a denial of service crash and...

Vorbis Tools Integer Overflow Vulnerability

vorbis-tools is a set of Ogg an audio compression format vorbis tools. An integer overflow vulnerability exists in vorbis-tools version 1.4.0 of oggenc. A local attacker can exploit this vulnerability to cause a denial of service crash by means of a specially crafted channel number in a WAV file...

CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

AZL-6953 CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

AZL-7401 CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

DEBIAN-CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

Integer overflow

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

Design/Logic Flaw

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

UBUNTU-CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

CVE-2014-9638

CVE-2014-9638 affects vorbis-tools 1.4.0 oggenc: processing a WAV with channels set to zero causes a division-by-zero crash. CVE-2014-9639 is an integer overflow in oggenc via crafted channel counts, triggering out-of-bounds memory access. CVE-2014-9640 is an out-of-bounds read in oggenc via craf...

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

CVE-2014-9638: Undefined Security Weakness

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

PT-2015-4316

Name of the Vulnerable Software and Affected Versions vorbis-tools version 1.4.0 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and crash, via a WAV file with the number of channels set to zero. Recommendations For vorbis-tools...