CVE-2015-6749

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-September/165555.html
• lists.fedoraproject.org/pipermail/package-announce/2015-September/166424.html
• lists.opensuse.org/opensuse-updates/2015-10/msg00013.html
• seclists.org/oss-sec/2015/q3/455
• seclists.org/oss-sec/2015/q3/457
• bugs.debian.org/cgi-bin/bugreport.cgi
• bugzilla.redhat.com/show_bug.cgi
• bugzilla.redhat.com/show_bug.cgi
• trac.xiph.org/attachment/ticket/2212/0001-oggenc-Fix-large-alloca-on-bad-AIFF-input.patch
• trac.xiph.org/ticket/2212 · Exploit

vorbis-tools のその他の脆弱性

• CVE-2023-43361高 7.8Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during…
• CVE-2017-11331中 5.5The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocati…
• CVE-2014-9640中 5.0oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
• CVE-2014-9639中 5.0Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channe…
• CVE-2014-9638中 5.0oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the n…