Buffer Overflow in vorbis-tools Affects Audio Processing
CVE-2015-6749

Currently unrated

Key Information:

Vendor

Xiph

Status
Vorbis-tools
Vendor
CVE Published:
21 September 2015

What is CVE-2015-6749?

A buffer overflow vulnerability exists in the aiff_open function of vorbis-tools versions 1.4.0 and earlier. This flaw allows remote attackers to exploit the system by sending a specially crafted AIFF file, potentially leading to a denial of service condition by crashing the application. It is crucial for users of vorbis-tools to ensure their software is up-to-date to mitigate the risks associated with this vulnerability.

References

http://seclists.org/oss-sec/2015/q3/455
mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1258424
x_refsource_CONFIRM
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797461
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.