VO
Product
Vorbis-tools
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add Vorbis-tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43361 | 7.8 | Oct 2 | Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg… Affected: 1.4.2 |
| CVE-2017-11331 | 5.5 | Jul 31 | The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file Affected: 1.4.0 |
| CVE-2015-6749 | – | Sep 21 | Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file Affected: through 1.4.0 |
| CVE-2014-9640 | – | Jan 23 | oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file Affected: 1.4.0 |
| CVE-2014-9639 | – | Jan 23 | Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an… Affected: 1.4.0 |
| CVE-2014-9638 | – | Jan 23 | oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero Affected: 1.4.0 |
Showing 6