medium6.8
CVE-2008-1420
Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code…
Impact
Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xiph.Org | Libvorbis | Versions 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0, 1.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
- http://secunia.com/advisories/30234
- http://secunia.com/advisories/30237
- http://secunia.com/advisories/30247
- http://secunia.com/advisories/30259
- http://secunia.com/advisories/30479
- http://secunia.com/advisories/30581
- http://secunia.com/advisories/30820
- http://secunia.com/advisories/32946
- http://secunia.com/advisories/36463
- http://security.gentoo.org/glsa/glsa-200806-09.xml
- http://www.debian.org/security/2008/dsa-1591
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:102
- http://www.redhat.com/support/errata/RHSA-2008-0270.html
- http://www.redhat.com/support/errata/RHSA-2008-0271.html
- http://www.securityfocus.com/bid/29206
- http://www.securitytracker.com/id?1020029
- http://www.ubuntu.com/usn/USN-682-1
- http://www.vupen.com/english/advisories/2008/1510/references
- https://bugzilla.redhat.com/show_bug.cgi?id=440706
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42402
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9500
- https://usn.ubuntu.com/825-1/
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html