CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

CVE-2014-9640

CVE-2014-9640 affects vorbis-tools 1.4.0, specifically oggenc/oggenc.c. The vulnerability is an out-of-bounds read triggered by a crafted raw file, enabling a remote attacker to cause a denial of service. Multiple distributions reference this issue and provide patches/upstream fixes (e.g., Debian...

CVE-2014-9639

CVE-2014-9639 affects vorbis-tools (og genc) when processing WAV input: an integer overflow triggered by a crafted number of channels can cause out-of-bounds memory access and crash (DoS). The issue is reported for vorbis-tools 1.4.0; several advisories note that patched versions are available (u...

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

SuSE 10 Security Update : Ogg Vorbis tools (ZYPP Patch Number 5302)

Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Mandriva Linux Security Advisory : vorbis-tools (MDVSA-2008:093)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Mandriva Update for vorbis-tools MDVA-2008:010 (vorbis-tools)

Check for the Version of vorbis-tools OpenVAS Vulnerability Test Mandriva Update for vorbis-tools MDVA-2008:010 vorbis-tools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Ubuntu Update for vorbis-tools vulnerability USN-611-2

Ubuntu Update for Linux kernel vulnerabilities USN-611-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6112.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for vorbis-tools vulnerability USN-611-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-611-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: vorbis-tools

The remote host is missing an update to the system as announced in the referenced advisory. VID 633716fa-1f8f-11dd-b143-0211d880e350 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: vorbis-tools

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

openSUSE 10 Security Update : vorbis-tools (vorbis-tools-5192)

Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code CVE-2008-1686. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

FreeBSD : vorbis-tools -- Speex header processing vulnerability (633716fa-1f8f-11dd-b143-0211d880e350)

Secunia reports : A vulnerability has been reported in vorbis-tools, which can potentially be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an input validation error when processing Speex headers, which can be exploited via a specially crafted Spe...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : vorbis-tools vulnerability (USN-611-2)

USN-611-1 fixed a vulnerability in Speex. This update provides the corresponding update for ogg123, part of vorbis-tools. It was discovered that Speex did not properly validate its input when processing Speex file headers. If a user or automated system were tricked into opening a specially crafte...

GLSA-200804-17 : Speex: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200804-17 Speex: User-assisted execution of arbitrary code oCERT reported that the Speex library does not properly validate the 'mode' value it derives from Speex streams, allowing for array indexing vulnerabilities inside multipl...

vorbis-tools -- Speex header processing vulnerability

Secunia reports: A vulnerability has been reported in vorbis-tools, which can potentially be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an input validation error when processing Speex headers, which can be exploited via a specially crafted Spee...

[oCERT-2008-004] multiple speex implementations insufficient boundary checks

2008/04/17 2008-004 multiple speex implementations insufficient boundary checks Description: The reference speex decoder from the Speex library performs insufficient boundary checks on a header structure read from user input, this has been reported in oCERT-2008-002 advisory. Further investigatio...