CVE-2014-9639

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-February/150543.html
• lists.fedoraproject.org/pipermail/package-announce/2015-February/150570.html
• lists.opensuse.org/opensuse-updates/2015-03/msg00054.html
• seclists.org/fulldisclosure/2015/Jan/78
• openwall.com/lists/oss-security/2015/01/21/5
• openwall.com/lists/oss-security/2015/01/22/9
• securityfocus.com/bid/72295
• trac.xiph.org/ticket/2136 · Exploit

vorbis-tools のその他の脆弱性

• CVE-2023-43361高 7.8Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during…
• CVE-2017-11331中 5.5The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocati…
• CVE-2015-6749中 4.3Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of s…
• CVE-2014-9640中 5.0oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
• CVE-2014-9638中 5.0oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the n…