738 matches found
CVE-2017-14632
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbisanalysisheaderout in info.c when vi-channels=0, a similar issue to Mozilla bug 550184...
CVE-2017-14633
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0forward in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbisanalysis...
CVE-2017-14633
CVE-2017-14633 : In Xiph.Org libvorbis 1.3.5, there is an out-of-bounds array read in mapping0_forward() of mapping0.c that may cause a denial of service when processing a crafted audio file with vorbis_analysis(). The issue is fixed upstream in libvorbis 1.3.6. Public advisories across distribut...
CVE-2017-14632
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbisanalysisheaderout in info.c when vi-channels=0, a similar issue to Mozilla bug 550184...
CVE-2017-14633
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0forward in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbisanalysis...
CVE-2017-14632
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbisanalysisheaderout in info.c when vi-channels=0, a similar issue to Mozilla bug 550184...
libvorbis -- two vulnerabilities
Two vulnerabilities were fixed in the upstream repository: The barknoisehybridmp function allows remote attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact via a crafted file. mapping0forward does not validate the number of...
UBUNTU-CVE-2017-14632
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbisanalysisheaderout in info.c when vi-channels=0, a similar issue to Mozilla bug 550184...
UBUNTU-CVE-2017-14633
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0forward in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbisanalysis...
PT-2017-13595 · Xiph.Org +3 · Libvorbis +3
Name of the Vulnerable Software and Affected Versions: libvorbis version 1.3.5 Description: An out-of-bounds array read issue exists in the function mapping0 forward in mapping0.c. This may lead to a denial of service DoS when operating on a crafted audio file with vorbis analysis. Recommendation...
CVE-2017-0764
A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...
Remote code execution
A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...
CVE-2017-0764
A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...
CVE-2017-0764
CVE-2017-0764 is a remote code execution in Android’s media framework (libvorbis). Affected Android versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. The root cause is a flaw in media processing by libvorbis that could be exploited via a crafted file. CVSS3/ATT&CK context from th...
CVE-2017-0764
A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...
Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-31366)
Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA for short. media framework libvorbis is one of the audio encoding/decoding libraries. A remote code execution vulnerability exists in Media frameworklibvorbis in Android. A...
CVE-2017-0764
A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...
Xiph.Org libvorbis lib/block.c file denial of service vulnerability
Xiph.Org libvorbis is an open source audio music encoding and decoding function library . A security vulnerability exists in the 'vorbisanalysiswrote' function in the lib/block.c file in Xiph.Org libvorbis version 1.3.5. A remote attacker can exploit this vulnerability to cause a denial of servic...
Xiph.Org libvorbis 'orbis_block_clear' function denial of service vulnerability
Xiph.Org libvorbis is an open source audio music encoding and decoding function library . A security vulnerability exists in the 'orbisblockclear' function in the lib/block.c file in Xiph.Org libvorbis version 1.3.5. A remote attacker can exploit this vulnerability to cause a denial of service nu...