Summary
It was discovered that libvorbis incorrectly handled certain sound files.
An attacker could possibly use this to execute arbitrary code.
(CVE-2017-14632)
It was discovered that libvorbis incorrectly handled certain sound files.
An attacker could use this to cause a denial of service.
(CVE-2017-14633)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libvorbis | 1.3.2-1.3ubuntu1.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | libvorbis | 1.3.5-3ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis…
-
Unscored —
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in map…