FreeBSD Ports: libvorbis

The remote host is missing an update to the system as announced in the referenced advisory. VID f5a76faf-244c-11dd-b143-0211d880e350 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200806-09 : libvorbis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200806-09 libvorbis: Multiple vulnerabilities Will Drewry of the Google Security Team reported multiple vulnerabilities in libvorbis: A zero value for 'codebook.dim' is not properly handled, leading to a crash, infinite loop or...

Debian Security Advisory DSA 1591-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 1591-1. OpenVAS Vulnerability Test $Id: deb15911.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1591-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1591-1] New libvorbis packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1591-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 03, 2008 http://www.debian.org/security/faq -...

Debian DSA-1591-1 : libvorbis - several vulnerabilities

Several local remote vulnerabilities have been discovered in libvorbis, a library for the Vorbis general-purpose compressed audio codec. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1419 libvorbis does not properly handle a zero value which allow...

openSUSE 10 Security Update : libvorbis (libvorbis-5258)

Several security problems were fixed in libvorbis : - CVE-2008-1419 - Division by zero - CVE-2008-1420 - integer overflow - CVE-2008-1423 - integer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

SuSE 10 Security Update : libvorbis (ZYPP Patch Number 5259)

Several security problems were fixed in libvorbis : - Division by zero. CVE-2008-1419 - integer overflow. CVE-2008-1420 - integer overflow. CVE-2008-1423 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

libvorbis多个缓冲区溢出漏洞

BUGTRAQ ID: 29206 CVECAN ID: CVE-2008-1419,CVE-2008-1420,CVE-2008-1423 libvorbis是开源的音频音乐编码解码函数库。 libvorbis在处理畸形格式的OGG文件时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果特制的OGG文件包含有codebook维度为0的话，打开该文件就会导致使用libvorbis库的应用程序崩溃、出现死循环或堆溢出。...

CVE-2008-1423

CVE-2008-1423 affects Xiph.org libvorbis up to version 1.2.0 and earlier, due to an integer overflow in a specific quantvals/quantlist calculation that can trigger a heap-based overflow when processing crafted OGG files with large virtual codebooks. This can lead to a crash or remote code executi...

libvorbis security update

CentOS Errata and Security Advisory CESA-2008:0271-01 Updated libvorbis packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contai...

Fedora 7 : libvorbis-1.1.2-4.fc7 (2008-3898)

Will Drewry of the Google Security Team reported several flaws in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...

Fedora 8 : libvorbis-1.2.0-2.fc8 (2008-3934)

Will Drewry of the Google Security Team reported several flaws in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...

RHEL 2.1 : libvorbis (RHSA-2008:0271)

Updated libvorbis packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contain runtime libraries for use in programs that support O...

libvorbis security update

CentOS Errata and Security Advisory CESA-2008:0270 Updated libvorbis packages that fix various security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages...

Important: Red Hat Security Advisory: libvorbis security update

Updated libvorbis packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contain runtime libraries for use in programs that support O...

libvorbis security update

1.1.2-3.el5.2 - fix release tag Related: 444707 1.1.2-3.el5.1 - fix CVE-2008-1420, CVE-2008-1419, CVE-2008-1423 Resolves: 444707...

Debian Security Advisory DSA 1423-1 (sitebar)

The remote host is missing an update to sitebar announced via advisory DSA 1423-1. OpenVAS Vulnerability Test $Id: deb14231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1423-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1423-1 : sitebar - several vulnerabilities

Several remote vulnerabilities have been discovered in sitebar, a web-based bookmark manager written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5491 A directory traversal vulnerability in the translation module allows remote authenticat...

CVE-2003-1423

Vulnerability summary: Petitforum stores the liste.txt data file under the web document root with insufficient access control, allowing remote attackers to obtain sensitive information (e-mails and encrypted passwords). Root cause: improper access restrictions on the data file within the web root...

CVE-2007-1423

The CVE-2007-1423 entry concerns multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier. The root cause is that the g_include parameter used by include/include_top.php (and certain other PHP scripts) can be manipulated to cause local/remote file inclusion, ...