Total vulnerabilities in the database
Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, which triggers a heap overflow.
| Software | From | Fixed in |
|---|---|---|
| xiph.org / libvorbis | 1.0.0 | 1.0.0.x |
| xiph.org / libvorbis | 1.0.1 | 1.0.1.x |
| xiph.org / libvorbis | 1.1.0 | 1.1.0.x |
| xiph.org / libvorbis | 1.1.1 | 1.1.1.x |
| xiph.org / libvorbis | 1.1.2 | 1.1.2.x |
| xiph.org / libvorbis | 1.2.0 | 1.2.0.x |