libvorbis: User-assisted execution of arbitrary code

Background libvorbis is the reference implementation of the Xiph.org Ogg Vorbis audio file format. It is used by many applications for playback of Ogg Vorbis files. Description Lucas Adamski reported that libvorbis does not correctly process file headers, related to static mode headers and encodi...

RedHat Security Advisory RHSA-2009:1219

The remote host is missing updates announced in advisory RHSA-2009:1219. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. An insufficient inp...

RedHat Security Advisory RHSA-2009:1219

The remote host is missing updates announced in advisory RHSA-2009:1219. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. An insufficient inp...

Ubuntu 8.04 LTS / 8.10 / 9.04 : libvorbis vulnerability (USN-825-1)

It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could execute arbitrary code with the user's privileges. CVE-2009-2663 USN-682-1 provided...

[USN-825-1] libvorbis vulnerability

=========================================================== Ubuntu Security Notice USN-825-1 August 24, 2009 libvorbis vulnerability CVE-2008-1420, CVE-2009-2663 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS...

USN-825-1: libvorbis vulnerability

It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could execute arbitrary code with the user's privileges. CVE-2009-2663 USN-682-1 provided...

CentOS 3 / 5 : libvorbis (CESA-2009:1219)

Updated libvorbis packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contain runtime libraries for use in programs that suppor...

RHEL 3 / 4 / 5 : libvorbis (RHSA-2009:1219)

Updated libvorbis packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contain runtime libraries for use in programs that suppor...

libvorbis security update

CentOS Errata and Security Advisory CESA-2009:1219 Updated libvorbis packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contai...

Important: Red Hat Security Advisory: libvorbis security update

Updated libvorbis packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contain runtime libraries for use in programs that suppor...

Fedora Core 10 FEDORA-2009-8445 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory FEDORA-2009-8445. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 10 FEDORA-2009-8445 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory FEDORA-2009-8445. OpenVAS Vulnerability Test $Id: fcore20098445.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8445 libvorbis Authors: Thomas Reinke Copyright: Copyright c 200...

[SECURITY] Fedora 11 Update: libvorbis-1.2.0-8.fc11

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis...

[SECURITY] Fedora 10 Update: libvorbis-1.2.0-6.fc10

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis...

DEBIAN-CVE-2009-2663

libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .ogg file...

CVE-2009-2663

libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted .ogg file...

MDVA-2008:153 : phonon

In Mandriva Linux 2009.0, phonon's signal availableAudioCaptureDevicesChanged was not connected, causing the KDE4 desktop to be unable to play OGG files. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:020)

Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of service by using crafted files CVE: CVE-2008-5233. Heap-based...

Ubuntu 7.10 / 8.04 LTS / 8.10 : ffmpeg, ffmpeg-debian vulnerabilities (USN-734-1)

It was discovered that FFmpeg did not correctly handle certain malformed Ogg Media OGM files. If a user were tricked into opening a crafted Ogg Media file, an attacker could cause the application using FFmpeg to crash, leading to a denial of service. CVE-2008-4610 It was discovered that FFmpeg di...

Mandriva Update for libvorbis MDVSA-2008:102 (libvorbis)

Check for the Version of libvorbis OpenVAS Vulnerability Test Mandriva Update for libvorbis MDVSA-2008:102 libvorbis Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...