Package(s):	libvorbis	CVE #(s):	CVE-2009-2663
Created:	August 11, 2009	Updated:	August 17, 2010
Description:	From the CVE entry: libvorbis before r16182, as used in Mozilla Firefox before 3.0.13 and 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
Alerts:	SUSE SUSE-SR:2010:015 gpg2, krb5, kvirc, libpcsclite1/pcsc-lite, libpython2_6-1_0, libvorbis, libwebkit, squidGuard, strongswan 2010-08-17 SUSE SUSE-SR:2010:014 OpenOffice_org, apache2-slms, aria2, bogofilter, cifs-mount/samba, clamav, exim, ghostscript-devel, gnutls, krb5, kvirc, lftp, libpython2_6-1_0, libtiff, libvorbis, lxsession, mono-addon-bytefx-data-mysql/bytefx-data-mysql, moodle, openldap2, opera, otrs, popt, postgresql, python-mako, squidGuard, vte, w3m, xmlrpc-c, XFree86/xorg-x11, yast2-webclient 2010-08-02 openSUSE openSUSE-SU-2010:0351-1 libvorbis 2010-07-05 Gentoo 200909-02 libvorbis 2009-09-07 Ubuntu USN-825-1 libvorbis 2009-08-24 Red Hat RHSA-2009:1219-01 libvorbis 2009-08-18 CentOS CESA-2009:1219 libvorbis 2009-08-18 CentOS CESA-2009:1219 libvorbis 2009-08-19 Fedora FEDORA-2009-8445 libvorbis 2009-08-10 Fedora FEDORA-2009-8445 libvorbis 2009-08-10 SuSE SUSE-SA:2009:048 MozillaFirefox 2009-10-20 Debian DSA-1939-1 libvorbis 2009-11-24

---

to post comments