PublicDate: 2007-07-26 21:30:00 UTC
Candidate: CVE-2007-3106
References:
 https://ubuntu.com/security/notices/USN-498-1
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3106
Description:
 lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0,
 allows context-dependent attackers to cause a denial of service and
 possibly execute arbitrary code via invalid (1) blocksize_0 and (2)
 blocksize_1 values, which trigger a "heap overwrite" in the _01inverse
 function in res0.c.  NOTE: this issue has been RECAST so that CVE-2007-4029
 handles additional vectors.
Ubuntu-Description:
Notes:
Priority: untriaged
Discovered-by:
Assigned-to:
CVSS:

Bugs:
upstream_libvorbis: released (1.2.0)
dapper_libvorbis: released (1.1.2-0ubuntu2.2)
edgy_libvorbis: released (1.1.2-1ubuntu1.2)
feisty_libvorbis: released (1.1.2.dfsg-1.2ubuntu2)
devel_libvorbis: not-affected