PT-2007-1101 · Xiph.Org+1 · Libvorbis+1

Published 2007-09-19 · Updated 2017-09-29 · CVE-2007-4065

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: libvorbis versions prior to 1.2.0

Description: The issue allows context-dependent attackers to cause a denial of service, potentially leading to disruption of confidentiality, integrity, and availability of protected information. This can be achieved through crafted OGG files. The exploitation of these issues can be done remotely.

Recommendations: For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted OGG files to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-09582

CVE-2007-4065

DSA-1471-1

RHSA-2007:0845

RHSA-2007:0912

RHSA-2007_0845

Affected Products

Red Hat

Libvorbis

References · 25

• https://security-tracker.debian.org/tracker/CVE-2007-4065 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0845.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200710-03.xml · Vendor Advisory
• https://trac.xiph.org/changeset/13217 · Patch
• http://securitytracker.com/id?1018712 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-4065 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09582 · Security Note
• https://osv.dev/vulnerability/CVE-2007-4065 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_23_sr.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0912.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:194 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4065 · Security Note
• http://secunia.com/advisories/26865 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2007-4029 · Note
• https://access.redhat.com/errata/RHSA-2007:0845 · Note