CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

CVE-2014-9638

CVE-2014-9638 affects vorbis-tools 1.4.0 oggenc: processing a WAV with channels set to zero causes a division-by-zero crash. CVE-2014-9639 is an integer overflow in oggenc via crafted channel counts, triggering out-of-bounds memory access. CVE-2014-9640 is an out-of-bounds read in oggenc via craf...

CVE-2014-9640

CVE-2014-9640 affects vorbis-tools 1.4.0, specifically oggenc/oggenc.c. The vulnerability is an out-of-bounds read triggered by a crafted raw file, enabling a remote attacker to cause a denial of service. Multiple distributions reference this issue and provide patches/upstream fixes (e.g., Debian...

CVE-2014-9639

CVE-2014-9639 affects vorbis-tools (og genc) when processing WAV input: an integer overflow triggered by a crafted number of channels can cause out-of-bounds memory access and crash (DoS). The issue is reported for vorbis-tools 1.4.0; several advisories note that patched versions are available (u...

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

CVE-2014-9639

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

PT-2015-4318

Name of the Vulnerable Software and Affected Versions vorbis-tools version 1.4.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by providing a crafted raw file. Recommendations For version 1.4.0, update to a newer version that...

PT-2015-4317

Name of the Vulnerable Software and Affected Versions vorbis-tools version 1.4.0 Description The issue is related to an integer overflow in oggenc, which can be triggered by a crafted number of channels in a WAV file. This leads to an out-of-bounds memory access, causing a denial of service crash...

CVE-2014-9640: Improper Restriction of Operations within the Bounds of a Memory Buffer

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted raw file...

CVE-2014-9638: Undefined Security Weakness

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

PT-2015-4316

Name of the Vulnerable Software and Affected Versions vorbis-tools version 1.4.0 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and crash, via a WAV file with the number of channels set to zero. Recommendations For vorbis-tools...

CVE-2014-9639: Undefined Security Weakness

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...

SuSE 10 Security Update : Ogg Vorbis tools (ZYPP Patch Number 5302)

Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Mandriva Linux Security Advisory : vorbis-tools (MDVSA-2008:093)

A vulnerability in the Speex library was found where it did not properly validate input values read from the Speex files headers. An attacker could create a malicious Speex file that would crash an application or potentially allow the execution of arbitrary code with the privileges of the...

Mandriva Update for vorbis-tools MDVA-2008:010 (vorbis-tools)

Check for the Version of vorbis-tools OpenVAS Vulnerability Test Mandriva Update for vorbis-tools MDVA-2008:010 vorbis-tools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Ubuntu Update for vorbis-tools vulnerability USN-611-2

Ubuntu Update for Linux kernel vulnerabilities USN-611-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6112.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for vorbis-tools vulnerability USN-611-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-611-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: vorbis-tools

The remote host is missing an update to the system as announced in the referenced advisory. VID 633716fa-1f8f-11dd-b143-0211d880e350 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: vorbis-tools

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

openSUSE 10 Security Update : vorbis-tools (vorbis-tools-5192)

Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code CVE-2008-1686. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...