PublicDate: 2007-07-26 22:30:00 UTC
Candidate: CVE-2007-4029
References:
 https://ubuntu.com/security/notices/USN-498-1
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4029
Description:
 libvorbis 1.1.2, and possibly other versions before 1.2.0, allows
 context-dependent attackers to cause a denial of service via (1) an invalid
 mapping type, which triggers an out-of-bounds read in the vorbis_info_clear
 function in info.c, and (2) invalid blocksize values that trigger a
 segmentation fault in the read function in block.c.
Ubuntu-Description:
Notes:
Priority: untriaged
Discovered-by:
Assigned-to:
CVSS:

Bugs:
upstream_libvorbis: released (1.2.0)
dapper_libvorbis: released (1.1.2-0ubuntu2.2)
edgy_libvorbis: released (1.1.2-1ubuntu1.2)
feisty_libvorbis: released (1.1.2.dfsg-1.2ubuntu2)
devel_libvorbis: not-affected