Out-of-Bounds Read Vulnerability in Vorbis Tools by Xiph.Org
CVE-2014-9640

Currently unrated

Key Information:

Vendor

Xiph

Status
Vorbis-tools
Vendor
CVE Published:
23 January 2015

What is CVE-2014-9640?

The out-of-bounds read vulnerability in the oggenc component of vorbis-tools version 1.4.0 allows remote attackers to exploit crafted raw files, potentially leading to a denial of service. This could result in disruption of service or unintended behavior within applications leveraging the affected software, making it critical for users to adopt updated versions and secure practices.

References

http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA
http://advisories.mageia.org/MGASA-2015-0051.html
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2015/01/21/6
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.