CVE-2017-11333

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

CVE-2017-11333

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

Memory corruption

The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

CVE-2017-11333

CVE-2017-11333 affects Xiph.Org libvorbis 1.3.5, where vorbis_analysis_wrote in lib/block.c can trigger a denial of service (OOM) via a crafted WAV file. Public details in connected pages indicate this is practical, with Debian DLA-2039-1 noting fixes in libvorbis 1.3.4-2+deb8u3 and Red Hat/Nessu...

CVE-2017-11548

CVE-2017-11548 affects Xiph.Org libao 1.2.0; the _tokenize_matrix function in audio_out.c can be triggered by a crafted MP3 to cause memory corruption and denial of service. Affected/libao 1.2.0 is discussed across multiple advisories (e.g., Mageia patch; Debian/Alpine ecosystems) and public expl...

CVE-2017-11331

CVE-2017-11331 affects Xiph.Org vorbis-tools 1.4.0; the wav_open function in oggenc/audio.c can be triggered by a crafted WAV file to cause a denial of service via memory allocation error. Multiple connected sources (CNVD-2017-19461, OSV CVE-2017-11331, OSV) corroborate a remote-exploitation vect...

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

CVE-2017-11548

The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...

CVE-2017-11548

The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file...

Fedora Update for libfishsound FEDORA-2010-9774

Check for the Version of libfishsound OpenVAS Vulnerability Test Fedora Update for libfishsound FEDORA-2010-9774 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 13 Update: libfishsound-0.9.1-5.fc13

libfishsound provides a simple programming interface for decoding and encoding audio data using Xiph.Org codecs FLAC, Speex and Vorbis. libfishsound by itself is designed to handle raw codec streams from a lower level layer such as UDP datagrams. When these codecs are used in files, they are...

Fedora Update for liboggz FEDORA-2010-9253

Check for the Version of liboggz OpenVAS Vulnerability Test Fedora Update for liboggz FEDORA-2010-9253 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Integer overflow

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...

CVE-2009-3389

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...

CDex 1.70b2 Buffer Overflow

Tools - Media file Player - Select files - Browse to a folder - - Open - Play evil.ogg / $frgmnt1 = "OggS". //for what I understood ... beginning "\x00". //streamstructureversion "\x02". //headertypeflag "\x00\x00\x00\x00\x00\x00\x00\x00". //granularposition "\x66\x07\x00\x00"...

Fedora Update for libfishsound FEDORA-2008-3059

Check for the Version of libfishsound OpenVAS Vulnerability Test Fedora Update for libfishsound FEDORA-2008-3059 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

FreeBSD Ports: libvorbis

The remote host is missing an update to the system as announced in the referenced advisory. VID f5a76faf-244c-11dd-b143-0211d880e350 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

libvorbis: Multiple vulnerabilities

Background libvorbis is the reference implementation of the Xiph.org Ogg Vorbis audio file format. It is used by many applications for playback of Ogg Vorbis files. Description Will Drewry of the Google Security Team reported multiple vulnerabilities in libvorbis: A zero value for "codebook.dim" ...

Debian DSA-1584-1 : libfishsound - buffer overflow

It was discovered that libfishsound, a simple programming interface that wraps Xiph.Org audio codecs, didn't correctly handle negative values in a particular header field. This could allow malicious files to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...