Libvorbis Denial Of Service And Memory Corruption Vulnerabilities
BID:25082
Info
Libvorbis Denial Of Service And Memory Corruption Vulnerabilities
| Bugtraq ID: | 25082 |
| Class: | Unknown |
| CVE: |
CVE-2007-3106 CVE-2007-4029 CVE-2007-4065 CVE-2007-4066 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 26 2007 12:00AM |
| Updated: | Mar 19 2015 08:51AM |
| Credit: | David Thiel is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Xiph.org libvorbis 1.1.2 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Turbolinux wizpy 0 Turbolinux Turbolinux Server 10.0 x86 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Server 10.0.0 x64 Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux FUJI Turbolinux Turbolinux 10 F... TurboLinux Personal TurboLinux Multimedia Turbolinux Home Turbolinux FUJI 0 Turbolinux Appliance Server 2.0 Tellini Music Box 0 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 8 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise SDK 10 SuSE SUSE Linux Enterprise Desktop 10 SP1 SuSE SUSE Linux Enterprise Desktop 10 SuSE openSUSE 10.3 SuSE Linux Professional 10.2 x86_64 SuSE Linux Personal 10.2 x86_64 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. openSUSE 10.2 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 10.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 10.2 S.u.S.E. Linux Personal 10.1 S.u.S.E. Linux Desktop 10 S.u.S.E. Linux 10.1 x86-64 S.u.S.E. Linux 10.1 x86 S.u.S.E. Linux 10.1 ppc S.u.S.E. Linux 10.0 x86-64 S.u.S.E. Linux 10.0 x86 S.u.S.E. Linux 10.0 ppc rPath rPath Linux 1 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Desktop 4.0 RedHat Desktop 3.0 RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 RedHat Advanced Workstation for the Itanium Processor 2.1 Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux AS 3 Red Hat Enterprise Linux AS 2.1 IA64 Red Hat Enterprise Linux AS 2.1 Red Hat Enterprise Linux 5 Server Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Foresight Linux Foresight Linux 1.1 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
Xiph.org libvorbis 1.2 Tellini Music Box 1.6 |
Discussion
Libvorbis Denial Of Service And Memory Corruption Vulnerabilities
Applications that use the libvorbis library are prone to multiple remote vulnerabilities, including multiple denial-of-service issues and memory-corruption issues.
An attacker can exploit these issues to execute arbitrary code within the context of the affected application or cause the application to crash.
These issues affect libvorbis 1.1.2; other versions of the library may also be affected.
Applications that use the libvorbis library are prone to multiple remote vulnerabilities, including multiple denial-of-service issues and memory-corruption issues.
An attacker can exploit these issues to execute arbitrary code within the context of the affected application or cause the application to crash.
These issues affect libvorbis 1.1.2; other versions of the library may also be affected.
Exploit / POC
Libvorbis Denial Of Service And Memory Corruption Vulnerabilities
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Libvorbis Denial Of Service And Memory Corruption Vulnerabilities
Solution:
The vendor released libvorbis 1.2.0 to address these issues. Please see the references for more information.
Turbolinux Home
Turbolinux Turbolinux Server 10.0.0 x64
Tellini Music Box 0
TurboLinux Personal
Turbolinux Turbolinux Desktop 10.0
Solution:
The vendor released libvorbis 1.2.0 to address these issues. Please see the references for more information.
Turbolinux Home
-
Turbolinux libvorbis-1.0-3.i586.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/libvorbis-1.0-3.i586.rpm
Turbolinux Turbolinux Server 10.0.0 x64
-
Turbolinux libvorbis-1.0.1-5.x86_64.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/RPMS/libvorbis-1.0.1-5.x86_64.rpm -
Turbolinux libvorbis-devel-1.0.1-5.x86_64.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/RPMS/libvorbis-devel-1.0.1-5.x86_64.rpm
Tellini Music Box 0
-
Tellini MusicBox-1.6.dmg
http://files.tellini.info/MusicBox-1.6.dmg
TurboLinux Personal
-
Turbolinux libvorbis-1.0-3.i586.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/libvorbis-1.0-3.i586.rpm
Turbolinux Turbolinux Desktop 10.0
-
Turbolinux libvorbis-1.0-3.i586.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/libvorbis-1.0-3.i586.rpm
References
Libvorbis Denial Of Service And Memory Corruption Vulnerabilities
References:
References:
- Libvorbis Home Page (Xiph.org)
- Music Box Homepage (Tellini)
- libvorbis 1.1.2 - Multiple memory corruption flaws ([email protected])
- RHSA-2007:0845-4 libvorbis security update (Red Hat)
- RHSA-2007:0912-3 - libvorbis security update (Red Hat)