libtheora:fuzzer-decoder: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://gitlab.xiph.org/xiph/theora.git Detailed Report: https://oss-fuzz.com/testcase?key=5761911192027136 Project: libtheora Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanlibtheora Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libtheora:fuzzer-decoder: Use-of-uninitialized-value in TheoraDecoder::writeImage

Project: https://gitlab.xiph.org/xiph/theora.git Detailed Report: https://oss-fuzz.com/testcase?key=5706045170647040 Project: libtheora Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanlibtheora Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

Gentoo Security Advisory GLSA 201312-04

Gentoo Linux Local Security Checks GLSA 201312-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

libtheora: Arbitrary code execution

Background libtheora is the reference implementation of Theora, a free and open video compression format from the Xiph.org Foundation. Description An integer overflow flaw has been discovered in libtheora. Impact A remote attacker could execute arbitrary code or cause a Denial of Service conditio...

GLSA-201312-04 : libtheora: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201312-04 libtheora: Arbitrary code execution An integer overflow flaw has been discovered in libtheora. Impact : A remote attacker could execute arbitrary code or cause a Denial of Service condition. Workaround : There is no know...

SuSE 11 Security Update : libtheora (SAT Patch Number 2067)

An integer overflow was fixed in libtheora. It could be exploited remotely to execute arbitrary code. CVE-2009-3389: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Numeric Errors. CWE-189 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:338)

Security issues were identified and fixed in firefox 3.5.x : liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service application crash or execute arbitrary code via unspecified vectors, related to memory safe...

Debian Security Advisory DSA 2045-1 (libtheora)

The remote host is missing an update to libtheora announced via advisory DSA 2045-1. OpenVAS Vulnerability Test $Id: deb20451.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2045-1 libtheora Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2045-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2045-1 : libtheora - integer overflow

Bob Clary, Dan Kaminsky and David Keeler discovered that in libtheora, a video library part of the Ogg project, several flaws allow context-dependent attackers via a large and specially crafted media file, to cause a denial of service crash of the player using this library, and possibly arbitrary...

[SECURITY] [DSA 2045-1] New libtheora packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2045-1 [email protected] http://www.debian.org/security/ Sébastien Delafond May 11, 2010 http://www.debian.org/security/faq -...

DSA-2045-1 libtheora - arbitrary code execution

Bulletin has no description...

openSUSE Security Update : libtheora (libtheora-2069)

An integer overflow was fixed in libtheora. It could be exploited remotely to execute arbitrary code. CVE-2009-3389: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Numeric Errors CWE-189 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : libtheora (libtheora-2069)

An integer overflow was fixed in libtheora. It could be exploited remotely to execute arbitrary code. CVE-2009-3389: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Numeric Errors CWE-189 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandriva Update for libtheora MDVSA-2010:043 (libtheora)

Check for the Version of libtheora OpenVAS Vulnerability Test Mandriva Update for libtheora MDVSA-2010:043 libtheora Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for libtheora MDVSA-2010:043 (libtheora)

Check for the Version of libtheora OpenVAS Vulnerability Test Mandriva Update for libtheora MDVSA-2010:043 libtheora Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Linux Security Advisory : libtheora (MDVSA-2010:043)

A vulnerability have been discovered and corrected in libtheora : Integer overflow in libtheora in Xiph.Org Theora before 1.1 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions CVE-2009-3389. The updated...

Integer overflow

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...

CVE-2009-3389

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...

DEBIAN-CVE-2009-3389

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...