CVE-2014-9638

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-February/150543.html
• lists.fedoraproject.org/pipermail/package-announce/2015-February/150570.html
• lists.opensuse.org/opensuse-updates/2015-03/msg00054.html
• seclists.org/fulldisclosure/2015/Jan/78
• openwall.com/lists/oss-security/2015/01/21/5
• openwall.com/lists/oss-security/2015/01/22/9
• securityfocus.com/bid/72290
• trac.xiph.org/ticket/2137 · Exploit

vorbis-tools のその他の脆弱性

• CVE-2023-43361高 7.8Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during…
• CVE-2017-11331中 5.5The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocati…
• CVE-2015-6749中 4.3Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of s…
• CVE-2014-9640中 5.0oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
• CVE-2014-9639中 5.0Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channe…