Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
| AND |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 2.1 | |||
| libvorbis-0:1.0rc2-7.el2 | cpe:/o:redhat:enterprise_linux:2.1 | RHSA-2007:0912 | 2007-10-11T00:00:00Z |
| Red Hat Enterprise Linux 3 | |||
| libvorbis-1:1.0-8.el3 | cpe:/o:redhat:enterprise_linux:3 | RHSA-2007:0845 | 2007-09-19T00:00:00Z |
| Red Hat Enterprise Linux 4 | |||
| libvorbis-1:1.1.0-2.el4.5 | cpe:/o:redhat:enterprise_linux:4 | RHSA-2007:0845 | 2007-09-19T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| libvorbis-1:1.1.2-3.el5.0 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2007:0845 | 2007-09-19T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1471-1 | New libvorbis packages fix several vulnerabilities |
EUVD |
EUVD-2007-4013 | libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c. |
Ubuntu USN |
USN-498-1 | libvorbis vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 1.7% (1.666% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.