Vorbis Tools oggenc 1.4.0 - '.wav' Denial of Service

vorbis-tools oggenc vulnerability ================ Author : qflb.wu =============== Introduction: ============= The Vorbis Tools package contains command-line tools useful for encoding, playing or editing files using the Ogg CODEC. Affected version: ===== 1.4.0 Vulnerability Description:...

PT-2017-11931 · Xiph.Org +2 · Vorbis-Tools +2

Name of the Vulnerable Software and Affected Versions: vorbis-tools version 1.4.0 Description: The issue allows remote attackers to cause a denial of service, specifically a memory allocation error, by using a crafted wav file. This is related to the wav open function in oggenc/audio.c...

Vorbis Tools oggenc 1.4.0 - .wav Denial of Service Exploit

Exploit for linux platform in category dos / poc vorbis-tools oggenc vulnerability ================ Author : qflb.wu =============== Introduction: ============= The Vorbis Tools package contains command-line tools useful for encoding, playing or editing files using the Ogg CODEC. Affected version...

Debian DLA-1010-1 : vorbis-tools security update

vorbis-tools is vulnerable to multiple issues that can result in denial of service. CVE-2014-9638 Divide by zero error in oggenc with a WAV file whose number of channels is set to zero. CVE-2014-9639 Integer overflow in oggenc via a crafted number of channels in a WAV file, which triggers an...

[SECURITY] [DLA 1010-1] vorbis-tools security update

Package : vorbis-tools Version : 1.4.0-1+deb7u1 CVE ID : CVE-2014-9638 CVE-2014-9639 CVE-2014-9640 CVE-2015-6749 Debian Bug : 797461 776086 771363 vorbis-tools is vulnerable to multiple issues that can result in denial of service. CVE-2014-9638 Divide by zero error in oggenc with a WAV file whose...

DLA-1010-1 vorbis-tools - security update

Bulletin has no description...

vorbis-tools infinite loop vulnerability

Vorbis-tools is used to manipulate and create Vorbis files.OGG Vorbis is a new audio compression format, similar to existing music formats such as MP3. vorbis-tools infinite loop vulnerability. The designer did not set up a numeric legitimacy check, which led to an overflow in the fseek function ...

vorbis-tools: denial of service

Buffer overflow in the aiffopen function in oggenc/audio.c allows local attackers to cause a denial of service crash via a crafted AIFF file...

SUSE SLED11 Security Update : vorbis-tools (SUSE-SU-2015:1775-1)

vorbis-tools was updated to fix several security issues. - A buffer overflow in aiffopen that could be triggered by opening prepared malicious files CVE-2015-6749, bsc943795. - A division by zero and integer overflow by crafted WAV files was fixed CVE-2014-9638, CVE-2014-9639, bnc914439, bnc91444...

SUSE SLED12 / SLES12 Security Update : vorbis-tools (SUSE-SU-2015:1765-1)

vorbis-tools was updated to fix a buffer overflow in aiffopen that could be triggered by opening prepared malicious files. CVE-2015-6749, bsc943795. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

Mageia: Security Advisory (MGASA-2015-0353)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2015:1775-1 Security update for vorbis-tools

vorbis-tools was updated to fix several security issues. - A buffer overflow in aiffopen that could be triggered by opening prepared malicious files CVE-2015-6749, bsc943795. - A division by zero and integer overflow by crafted WAV files was fixed CVE-2014-9638, CVE-2014-9639, bnc914439, bnc91444...

openSUSE Security Update : vorbis-tools (openSUSE-2015-633)

vorbis-tools was updated to fix a buffer overflow in aiffopen, that could be used to crash or potentially execute code when opening aiff format files. CVE-2015-6749, bsc943795. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

Debian DLA-317-1 : vorbis-tools security update

Various issues have been fixed in Debian LTS squeeze for package vorbis-tools. CVE-2014-9638 A crafted WAV file with number of channels set to 0 will cause oggenc to crash due to a division by zero issue. This issue has been fixed upstream by providing a fix for CVE-2014-9639. Reported upstream b...

[SECURITY] [DLA 317-1] vorbis-tools security update

Package : vorbis-tools Version : 1.4.0-1+deb6u1 CVE ID : CVE-2014-9638 CVE-2014-9639 CVE-2014-9640 CVE-2015-6749 Debian Bug : 771363 797461 776086 Various issues have been fixed in Debian LTS squeeze for package vorbis-tools. CVE-2014-9638 A crafted WAV file with number of channels set to 0 will...

DLA-317-1 vorbis-tools - security update

Bulletin has no description...

SUSE-SU-2015:1765-1 Security update for vorbis-tools

vorbis-tools was updated to fix a buffer overflow in aiffopen that could be triggered by opening prepared malicious files. CVE-2015-6749, bsc943795...

vorbis-tools buffer overflow vulnerability

vorbis-tools is a set of Ogg an audio compression format vorbis tools. A buffer overflow vulnerability exists in the 'aiffopen' function in the oggenc/audio.c file in vorbis-tools 1.4.0 and earlier. A remote attacker can exploit this vulnerability to cause a denial of service crash with the help ...

CVE-2015-6749

Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a crafted AIFF file...

AZL-6955 CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35

Buffer overflow in the aiffopen function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service crash via a crafted AIFF file...