libvorbis vulnerabilities

2008-12-0100:00:00

ubuntu.com

6.5 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.042 Low

EPSS

Percentile

92.1%

JSON

Releases

Ubuntu 8.04
Ubuntu 7.10
Ubuntu 6.06

Packages

libvorbis -

Details

It was discovered that libvorbis did not correctly handle certain malformed
sound files. If a user were tricked into opening a specially crafted sound
file with an application that uses libvorbis, an attacker could execute
arbitrary code with the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibvorbis0a< 1.2.0.dfsg-2ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibvorbis-dev< 1.2.0.dfsg-2ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibvorbisenc2< 1.2.0.dfsg-2ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibvorbisfile3< 1.2.0.dfsg-2ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibvorbis0a< 1.2.0.dfsg-1ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibvorbis-dev< 1.2.0.dfsg-1ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibvorbisenc2< 1.2.0.dfsg-1ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibvorbisfile3< 1.2.0.dfsg-1ubuntu0.1UNKNOWN
Ubuntu6.06noarchlibvorbis0a< 1.1.2-0ubuntu2.3UNKNOWN
Ubuntu6.06noarchlibvorbis-dev< 1.1.2-0ubuntu2.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	libvorbis0a	< 1.2.0.dfsg-2ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libvorbis-dev	< 1.2.0.dfsg-2ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libvorbisenc2	< 1.2.0.dfsg-2ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libvorbisfile3	< 1.2.0.dfsg-2ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	libvorbis0a	< 1.2.0.dfsg-1ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	libvorbis-dev	< 1.2.0.dfsg-1ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	libvorbisenc2	< 1.2.0.dfsg-1ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	libvorbisfile3	< 1.2.0.dfsg-1ubuntu0.1	UNKNOWN
Ubuntu	6.06	noarch	libvorbis0a	< 1.1.2-0ubuntu2.3	UNKNOWN
Ubuntu	6.06	noarch	libvorbis-dev	< 1.1.2-0ubuntu2.3	UNKNOWN