vorbis-tools: denial of service
| Package(s): | vorbis-tools | CVE #(s): | CVE-2014-9638 CVE-2014-9639 | ||||||||||||||||||||||||
| Created: | March 2, 2015 | Updated: | March 18, 2015 | ||||||||||||||||||||||||
| Description: | From the CVE entries:
oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero. (CVE-2014-9638) Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access. (CVE-2014-9639) | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||