libvorbis: fixed a heap based buffer overflow (important)

2012-03-0123:08:28

lists.opensuse.org

0.875 High

EPSS

Percentile

98.3%

JSON

Specially crafted ogg files could cause a heap-based buffer
overflow in the vorbis audio compression library that could
potentially be exploited by attackers to cause a crash or
execute arbitrary code (CVE-2012-0444).

OSVersionArchitecturePackageVersionFilename
openSUSE11.4x86_64libvorbis-devel< 1.3.2-6.7.1libvorbis-devel-1.3.2-6.7.1.x86_64.rpm
openSUSE11.4i586libvorbis0< 1.3.2-6.7.1libvorbis0-1.3.2-6.7.1.i586.rpm
openSUSE11.4x86_64libvorbisenc2-32bit< 1.3.2-6.7.1libvorbisenc2-32bit-1.3.2-6.7.1.x86_64.rpm
openSUSE11.4i586libvorbisfile3< 1.3.2-6.7.1libvorbisfile3-1.3.2-6.7.1.i586.rpm
openSUSE11.4noarchlibvorbis-doc< 1.3.2-6.7.1libvorbis-doc-1.3.2-6.7.1.noarch.rpm
openSUSE11.4x86_64libvorbisfile3-32bit< 1.3.2-6.7.1libvorbisfile3-32bit-1.3.2-6.7.1.x86_64.rpm
openSUSE11.4x86_64libvorbisenc2< 1.3.2-6.7.1libvorbisenc2-1.3.2-6.7.1.x86_64.rpm
openSUSE11.4x86_64libvorbisfile3< 1.3.2-6.7.1libvorbisfile3-1.3.2-6.7.1.x86_64.rpm
openSUSE11.4i586libvorbis-devel< 1.3.2-6.7.1libvorbis-devel-1.3.2-6.7.1.i586.rpm
openSUSE11.4i586libvorbisenc2< 1.3.2-6.7.1libvorbisenc2-1.3.2-6.7.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	11.4	x86_64	libvorbis-devel	< 1.3.2-6.7.1	libvorbis-devel-1.3.2-6.7.1.x86_64.rpm
openSUSE	11.4	i586	libvorbis0	< 1.3.2-6.7.1	libvorbis0-1.3.2-6.7.1.i586.rpm
openSUSE	11.4	x86_64	libvorbisenc2-32bit	< 1.3.2-6.7.1	libvorbisenc2-32bit-1.3.2-6.7.1.x86_64.rpm
openSUSE	11.4	i586	libvorbisfile3	< 1.3.2-6.7.1	libvorbisfile3-1.3.2-6.7.1.i586.rpm
openSUSE	11.4	noarch	libvorbis-doc	< 1.3.2-6.7.1	libvorbis-doc-1.3.2-6.7.1.noarch.rpm
openSUSE	11.4	x86_64	libvorbisfile3-32bit	< 1.3.2-6.7.1	libvorbisfile3-32bit-1.3.2-6.7.1.x86_64.rpm
openSUSE	11.4	x86_64	libvorbisenc2	< 1.3.2-6.7.1	libvorbisenc2-1.3.2-6.7.1.x86_64.rpm
openSUSE	11.4	x86_64	libvorbisfile3	< 1.3.2-6.7.1	libvorbisfile3-1.3.2-6.7.1.x86_64.rpm
openSUSE	11.4	i586	libvorbis-devel	< 1.3.2-6.7.1	libvorbis-devel-1.3.2-6.7.1.i586.rpm
openSUSE	11.4	i586	libvorbisenc2	< 1.3.2-6.7.1	libvorbisenc2-1.3.2-6.7.1.i586.rpm