CVE-2019-13218

Division by zero in the predictpoint function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...

CVE-2019-13221

A stack buffer overflow in the computecodewords function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file...

Sean Barrett stb_vorbis Buffer Overflow Vulnerability

Sean Barrett stbvorbis is a single-file public domain library based on C++. A buffer overflow vulnerability exists in the entire vorbis decoding path in Sean Barrett stbvorbis 1.12 and earlier. An attacker can exploit this vulnerability to corrupt memory, cause a denial of service, and execute a...

CVE-2018-1000050

Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...

CVE-2018-1000050

Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...

UBUNTU-CVE-2018-1000050

Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...

CVE-2018-1000050

Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...

CVE-2018-1000050

Sean Barrett stbvorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg...

Debian Security Advisory DSA 2412-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 2412-1. OpenVAS Vulnerability Test $Id: deb24121.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2412-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DSA-2406-1 icedove - several

Bulletin has no description...

CVE-2012-0444

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute...

DEBIAN-CVE-2012-0444

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute...

Memory corruption

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute...

CVE-2012-0444

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute...

GLSA-200909-02 : libvorbis: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200909-02 libvorbis: User-assisted execution of arbitrary code Lucas Adamski reported that libvorbis does not correctly process file headers, related to static mode headers and encoding books. Impact : A remote attacker could enti...

Stack overflow

Multiple stack-based buffer overflows in the CPLIReadTagOGG function in CPIPlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long 1 cTag or 2 cValue field in an OGG Vorbis file...

CVE-2007-6609

Multiple stack-based buffer overflows in the CPLIReadTagOGG function in CPIPlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long 1 cTag or 2 cValue field in an OGG Vorbis file...

CVE-2007-6609: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the CPLIReadTagOGG function in CPIPlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long 1 cTag or 2 cValue field in an OGG Vorbis file...

CVE-2007-3316

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...