CVE-2020-21723

A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service crash via opening of crafted ogg file...

CVE-2020-21722

Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file...

CVE-2020-21723

A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service crash via opening of crafted ogg file...

Sourceforge Ogg Video Tools 安全漏洞

Sourceforge Ogg Video Tools is a Sourceforge open source toolkit for manipulating and creating Ogg video files. A security vulnerability exists in Sourceforge Ogg Video Tools version 0.9.1, which stems from the presence of a segmentation error that allows remote attackers to cause a denial of...

CVE-2020-21723

A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service crash via opening of crafted ogg file...

CVE-2020-21722

Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file...

Sourceforge Ogg Video Tools 缓冲区错误漏洞

Sourceforge Ogg Video Tools is a Sourceforge open source toolkit for manipulating and creating Ogg video files. A security vulnerability exists in Sourceforge Ogg Video Tools version 0.9.1, which stems from the presence of a buffer overflow vulnerability that allows remote attackers to execute...

CVE-2020-21724

Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file...

PT-2023-11601 · Unknown +1 · Oggvideotools +1

Name of the Vulnerable Software and Affected Versions: oggvideotools version 0.9.1 Description: The issue allows remote attackers to run arbitrary code via the opening of a crafted ogg file. This is due to a Buffer Overflow vulnerability. Recommendations: For oggvideotools version 0.9.1, update t...

PT-2023-11602 · Unknown +1 · Oggvideotools +1

Name of the Vulnerable Software and Affected Versions: oggvideotools version 0.9.1 Description: A Segmentation Fault issue was discovered in the StreamSerializer::extractStreams function in streamSerializer.cpp, allowing remote attackers to cause a denial of service crash via the opening of a...

Sourceforge Ogg Video Tools 资源管理错误漏洞

Sourceforge Ogg Video Tools is a Sourceforge open source toolkit for manipulating and creating Ogg video files. A security vulnerability exists in Sourceforge Ogg Video Tools version 0.9.1, which stems from the presence of a buffer overflow vulnerability. An attacker can exploit the vulnerability...

Heap Use-After-Free in GPAC MP4Box's ogg_stream_clear Function When Processing OGG Files

A heap use-after-free vulnerability has been discovered in GPAC MP4Box's oggstreamclear function when processing OGG files. The vulnerability occurs due to improper handling of memory allocations and deallocations while processing OGG files. This leads to the use of previously freed memory, causi...

[SECURITY] Fedora 38 Update: qmmp-2.1.2-4.fc38

This program is an audio-player, written with help of Qt library. The user interface is similar to winamp or xmms. Main opportunities: Winamp and xmms skins support plugins support MPEG1 layer 2/3 support Ogg Vorbis support native FLAC support WavePack support ModPlug support PCM WAVE support CD...

[SECURITY] Fedora 38 Update: loudgain-0.6.8-13.fc38

loudgain is a versatile ReplayGain 2.0 loudness normalizer, based on the EBU R128/ITU BS.1770 standard -18 LUFS and supports FLAC/Ogg/MP2/MP3/MP4/M4A/ALAC/Opus/ASF/WMA/WAV/WavPack/AIFF/APE audio files. It uses the well-known mp3gain commandline syntax but will never modify the actual audio data...

Fedora: Security Advisory for loudgain (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for qmmp (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE CVE-2007-5301

Buffer overflow in the vorbisstreaminfo function in input/vorbis/vorbisengine.c aka the vorbis input plugin in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments...

SUSE CVE-2008-2009

Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service crash via a crafted OGG file that triggers memory corruption during execution of the makedecodetree function...

SUSE CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...

SUSE CVE-2009-2663

libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .ogg file...