CVE-2012-0859

CVE-2012-0859 affects FFmpeg libavcodec (vorbis.c render_line) prior to 0.9.1, due to an incomplete fix for CVE-2011-3893. A crafted Vorbis file can cause a crash or potentially allow code execution; upgrading FFmpeg to 0.9.1 or later is the documented remediation.

CVE-2012-0859

The renderline function in the vorbis codec vorbis.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of...

Mandriva Update for ffmpeg MDVSA-2012:075 (ffmpeg)

Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2012:075 ffmpeg Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for libvorbis MDVSA-2012:052 (libvorbis)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for ffmpeg MDVSA-2012:076 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for libvorbis MDVSA-2012:052 (libvorbis)

Check for the Version of libvorbis OpenVAS Vulnerability Test Mandriva Update for libvorbis MDVSA-2012:052 libvorbis Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Scientific Linux Security Update : libvorbis on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-3379 libvorbis: security fixes mentioned in MFSA 2009-63 Multiple flaws were found in the libvorbis library. A specially crafted Ogg Vorbis media format file Ogg could cause an application using libvorbis to crash or, possibly, execute arbitrary code when opened. CVE-2009-3379 The deskto...

Scientific Linux Security Update : firefox on SL4.x, SL5.x, SL6.x i386/x86_64 (20120131)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A use-after-free flaw was found in the way Firefox removed nsDOMAttribute child nodes. In certain circumstances, due to the premature notification of AttributeChildRemoved, a malicio...

Scientific Linux Security Update : gstreamer-plugins-base on SL5.x i386/x86_64

An integer overflow flaw which caused a heap-based buffer overflow was discovered in the Vorbis comment tags reader. An attacker could create a carefully-crafted Vorbis file that would cause an application using GStreamer to crash or, potentially, execute arbitrary code if opened by a victim...

Scientific Linux Security Update : libvorbis on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-2663 libvorbis: Improper codec headers processing DoS, ACE An insufficient input validation flaw was found in the way libvorbis processes the codec file headers static mode headers and encoding books of the Ogg Vorbis audio file format Ogg. A remote attacker could provide a specially...

Scientific Linux Security Update : libvorbis on SL4.x, SL5.x, SL6.x i386/x86_64 (20120215)

The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. A heap-based buffer overflow flaw was found in the way the libvorbis library parsed Ogg Vorb...

CentOS Update for firefox CESA-2012:0079 centos6

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2012:0079 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for libvorbis CESA-2012:0136 centos4

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for firefox CESA-2012:0079 centos4

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2012:0079 centos4 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for libvorbis CESA-2012:0136 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ffmpeg library multiple security vulnerabilities

Multiple security vulnerabilities on Westwood Studios VQA, Apple MJPEG-B, Theora, Matroska, Vorbis, Sony ATRAC3, DV, NSV parsing...

Mozilla Multiple Products Ogg Vorbis Decoding Memory Corruption (CVE-2012-0444)

A remote code execution vulnerability has been reported in Mozilla Firefox, Thunderbird and Seamonkey...

Fedora Update for taglib FEDORA-2012-4268

Check for the Version of taglib OpenVAS Vulnerability Test Fedora Update for taglib FEDORA-2012-4268 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mozilla Firefox Ogg Vorbis Decoding Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of Ogg...

[SECURITY] Fedora 16 Update: taglib-1.7.1-1.fc16

TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...