CVE-2007-4066

Published: Sep 21, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.exe related to the _psy_noiseguards_8 array.

Affected (1)

Products: Xiph.org: Libvorbis

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xiph.org Libvorbis	Up to 1.2.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (50)

http://secunia.com/advisories/24923

Source: secalert@redhat.com

http://secunia.com/advisories/26865

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/27099

Source: secalert@redhat.com

http://secunia.com/advisories/27170

Source: secalert@redhat.com

http://secunia.com/advisories/27439

Source: secalert@redhat.com

http://secunia.com/advisories/28614

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200710-03.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1018712

Source: secalert@redhat.com

http://svn.xiph.org/trunk/vorbis/CHANGES

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1471

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:194

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_23_sr.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0845.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0912.html

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=249780

Source: secalert@redhat.com

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11453

Source: secalert@redhat.com

https://trac.xiph.org/changeset/13162

Source: secalert@redhat.com

https://trac.xiph.org/changeset/13168

Source: secalert@redhat.com

https://trac.xiph.org/changeset/13169

Source: secalert@redhat.com

https://trac.xiph.org/changeset/13170

Source: secalert@redhat.com

https://trac.xiph.org/changeset/13172

Source: secalert@redhat.com

https://trac.xiph.org/changeset/13211

Source: secalert@redhat.com

https://trac.xiph.org/changeset/13215

Source: secalert@redhat.com

https://trac.xiph.org/ticket/300

Source: secalert@redhat.com

https://trac.xiph.org/ticket/853

Source: secalert@redhat.com

http://secunia.com/advisories/24923

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26865

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/27099

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27170

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27439

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28614

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200710-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1018712

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.xiph.org/trunk/vorbis/CHANGES

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1471

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:194

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_23_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0845.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0912.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=249780

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11453

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/changeset/13162

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/changeset/13168

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/changeset/13169

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/changeset/13170

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/changeset/13172

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/changeset/13211

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/changeset/13215

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/ticket/300

Source: af854a3a-2127-422b-91ae-364da2661108

https://trac.xiph.org/ticket/853

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.