libvorbis vulnerability

2012-02-2000:00:00

ubuntu.com

9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.885 High

EPSS

Percentile

98.7%

JSON

Releases

Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

libvorbis - The Vorbis General Audio Compression Codec

Details

It was discovered that libvorbis did not correctly handle certain malformed
ogg files. If a user were tricked into opening a specially crafted ogg file
with an application that uses libvorbis, an attacker could cause a denial
of service or possibly execute arbitrary code with the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchlibvorbis0a< 1.3.2-1ubuntu2.1UNKNOWN
Ubuntu11.10noarchlibvorbis-dbg< 1.3.2-1ubuntu2.1UNKNOWN
Ubuntu11.10noarchlibvorbis-dev< 1.3.2-1ubuntu2.1UNKNOWN
Ubuntu11.10noarchlibvorbisenc2< 1.3.2-1ubuntu2.1UNKNOWN
Ubuntu11.10noarchlibvorbisfile3< 1.3.2-1ubuntu2.1UNKNOWN
Ubuntu11.04noarchlibvorbis0a< 1.3.2-1ubuntu1.1UNKNOWN
Ubuntu11.04noarchlibvorbis-dbg< 1.3.2-1ubuntu1.1UNKNOWN
Ubuntu11.04noarchlibvorbis-dev< 1.3.2-1ubuntu1.1UNKNOWN
Ubuntu11.04noarchlibvorbisenc2< 1.3.2-1ubuntu1.1UNKNOWN
Ubuntu11.04noarchlibvorbisfile3< 1.3.2-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.10	noarch	libvorbis0a	< 1.3.2-1ubuntu2.1	UNKNOWN
Ubuntu	11.10	noarch	libvorbis-dbg	< 1.3.2-1ubuntu2.1	UNKNOWN
Ubuntu	11.10	noarch	libvorbis-dev	< 1.3.2-1ubuntu2.1	UNKNOWN
Ubuntu	11.10	noarch	libvorbisenc2	< 1.3.2-1ubuntu2.1	UNKNOWN
Ubuntu	11.10	noarch	libvorbisfile3	< 1.3.2-1ubuntu2.1	UNKNOWN
Ubuntu	11.04	noarch	libvorbis0a	< 1.3.2-1ubuntu1.1	UNKNOWN
Ubuntu	11.04	noarch	libvorbis-dbg	< 1.3.2-1ubuntu1.1	UNKNOWN
Ubuntu	11.04	noarch	libvorbis-dev	< 1.3.2-1ubuntu1.1	UNKNOWN
Ubuntu	11.04	noarch	libvorbisenc2	< 1.3.2-1ubuntu1.1	UNKNOWN
Ubuntu	11.04	noarch	libvorbisfile3	< 1.3.2-1ubuntu1.1	UNKNOWN