Integer Overflow Vulnerability in Oggenc Affects Vorbis Tools by Xiph Foundation
CVE-2014-9639

Currently unrated

Key Information:

Vendor

Xiph

Status
Vorbis-tools
Vendor
CVE Published:
23 January 2015

What is CVE-2014-9639?

An integer overflow in the oggenc component of vorbis-tools 1.4.0 allows remote attackers to execute a denial of service attack. By crafting a WAV file with a specific number of channels, an attacker can trigger an out-of-bounds memory access, resulting in a crash of the application. This vulnerability poses risks to systems utilizing the affected version of vorbis-tools for audio processing.

References

http://www.securityfocus.com/bid/72295
vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2015/01/21/5
mailing-listx_refsource_MLIST
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.