Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libvorbis: multiple vulnerabilities

Package(s):

libvorbis

CVE #(s):

CVE-2007-4065 CVE-2007-4066

Created:

October 11, 2007

Updated:

January 22, 2008

Description:

libvorbis has a number of vulnerabilities that can be triggered by opening a specially crafted Ogg file. Vulnerabilities include crashing and the execution of arbitrary code.

Alerts:

Debian	DSA-1471-1	2008-01-21
SuSE	SUSE-SR:2007:023	2007-10-31
Red Hat	RHSA-2007:0912-01	2007-10-11
Mandriva	MDKSA-2007:194	2007-10-10

(Log in to post comments)

libvorbis: multiple vulnerabilities

Posted Oct 18, 2007 13:31 UTC (Thu) by shalem (subscriber, #4062) [Link]

Note: this was already fixed in Fedora on 9 Augustus by the
libvorbis-1.1.2-3 release.