Total vulnerabilities in the database
Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during execution of the _make_decode_tree function.
| Software | From | Fixed in |
|---|---|---|
| xiph.org / libvorbis | 1.0-beta4 | 1.0-beta4.x |
| xiph.org / libvorbis | 1.0-rc1 | 1.0-rc1.x |
| xiph.org / libvorbis | 1.0-rc2 | 1.0-rc2.x |
| canonical / ubuntu_linux | 9.04 | 9.04.x |
| canonical / ubuntu_linux | 8.04 | 8.04.x |
| canonical / ubuntu_linux | 8.10 | 8.10.x |
| canonical / ubuntu_linux | 9.10 | 9.10.x |