CVE-2007-4065

概要

参考情報

• secunia.com/advisories/24923
• secunia.com/advisories/26865 · Patch
• secunia.com/advisories/27099
• secunia.com/advisories/27170
• secunia.com/advisories/27439
• security.gentoo.org/glsa/glsa-200710-03.xml
• securitytracker.com/id · Patch
• svn.xiph.org/trunk/vorbis/CHANGES
• mandriva.com/security/advisories
• novell.com/linux/security/advisories/2007_23_sr.html
• redhat.com/support/errata/RHSA-2007-0845.html
• redhat.com/support/errata/RHSA-2007-0912.html
• bugzilla.redhat.com/show_bug.cgi
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9173
• trac.xiph.org/changeset/13217 · Patch

libvorbis のその他の脆弱性

• CVE-2020-20412中 6.5lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a craft…
• CVE-2018-10393高 7.5bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.
• CVE-2018-10392高 8.8mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause …
• CVE-2017-14160高 8.8The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds ac…
• CVE-2017-14633中 6.5In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may le…