UBUNTU-CVE-2017-11333

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

Denial of service

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

CVE-2017-11333

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

Design/Logic Flaw

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

Improper Access Control

Overview Affected versions of this package are vulnerable to Improper Access Control. The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file. Remediation There is no fixed version for vorbis...

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

Design/Logic Flaw

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

CVE-2017-11333

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

CVE-2017-11332

CVE-2017-11332 affects SoX (Sound eXchange), specifically the startread function in wav.c of version 14.4.2. A crafted WAV file with certain conditions can cause a divide-by-zero error, leading to a denial of service (application crash). This vulnerability is documented in Debian and other adviso...

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

Vorbis Tools oggenc 1.4.0 - .wav Denial of Service Exploit

Exploit for linux platform in category dos / poc vorbis-tools oggenc vulnerability ================ Author : qflb.wu =============== Introduction: ============= The Vorbis Tools package contains command-line tools useful for encoding, playing or editing files using the Ogg CODEC. Affected version...

libvorbis 1.3.5 - Multiple Vulnerabilities

libvorbis 1.3.5 - Multiple Vulnerabilities libvorbis multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= The libvorbis package contains a general purpose audio and music encoding format. This is useful for creating encoding and playing decoding...

PT-2017-11931 · Xiph.Org +2 · Vorbis-Tools +2

Name of the Vulnerable Software and Affected Versions: vorbis-tools version 1.4.0 Description: The issue allows remote attackers to cause a denial of service, specifically a memory allocation error, by using a crafted wav file. This is related to the wav open function in oggenc/audio.c...

LAME Denial of Service Vulnerability (CNVD-2017-20146)

LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in the 'fillbufferresample' function in the libmp3lame/util.c file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer...

LAME Denial of Service Vulnerability (CNVD-2017-20144)

LAME is LAME team developed a set of open source MP3 audio compression software . A denial of service vulnerability exists in the 'unpackreadsamples' function in the frontend/getaudio.c file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service...