CVE-2007-4066
Fixed in a distro release EPSS 2%
Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.exe related to the _psy_noiseguards_8 array.
Products: xiph.org libvorbis
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvorbis | 1.2.0.dfsg-1 |
| Debian 12 | libvorbisidec | 1.0.2+svn16259-2 |
| Debian 13 | libvorbis | 1.2.0.dfsg-1 |
| Debian 13 | libvorbisidec | 1.0.2+svn16259-2 |
| Debian 14 | libvorbis | 1.2.0.dfsg-1 |
| Debian 14 | libvorbisidec | 1.0.2+svn16259-2 |
| Debian 3.1 | libvorbis | 1.1.0-2 |
| Debian 4.0 | libvorbis | 1.1.2.dfsg-1.3 |
| Red Hat Enterprise Linux 2.1 | libvorbis | 0:1.0rc2-7.el2 |
| Red Hat Enterprise Linux 2.1 | libvorbis-devel | 0:1.0rc2-7.el2 |
| Red Hat Enterprise Linux 3 | libvorbis | 1:1.0-8.el3 |
| Red Hat Enterprise Linux 3 | libvorbis-debuginfo | 1:1.0-8.el3 |
| Red Hat Enterprise Linux 3 | libvorbis-devel | 1:1.0-8.el3 |
| Red Hat Enterprise Linux 4 | libvorbis | 1:1.1.0-2.el4.5 |
| Red Hat Enterprise Linux 4 | libvorbis-debuginfo | 1:1.1.0-2.el4.5 |
| Red Hat Enterprise Linux 4 | libvorbis-devel | 1:1.1.0-2.el4.5 |
| Red Hat Enterprise Linux 5 | libvorbis | 1:1.1.2-3.el5.0 |
| Red Hat Enterprise Linux 5 | libvorbis-debuginfo | 1:1.1.2-3.el5.0 |
| Red Hat Enterprise Linux 5 | libvorbis-devel | 1:1.1.2-3.el5.0 |