SB2015092101 - Multiple vulnerabilities in Xiph.Org vorbis-tools

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2015092101

SB2015092101 - Multiple vulnerabilities in Xiph.Org vorbis-tools

Published: September 21, 2015 Updated: November 10, 2023

Security Bulletin ID SB2015092101
Severity
High
Patch available
YES
Number of vulnerabilities 5
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 60% Low 40%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 5 secuirty vulnerabilities.


1) Buffer overflow (CVE-ID: CVE-2015-6749)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in aiff_open function in oggenc/audio.c in vorbis-tools. A remote attacker can create a specially crafted AIFF file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


2) Buffer overflow (CVE-ID: CVE-2017-11331)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools. A remote attacker can create a specially crafted wav file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


3) Buffer overflow (CVE-ID: CVE-2014-9640)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in oggenc/oggenc.c in vorbis-tools. A remote attacker can create a specially crafted raw file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


4) Out-of-bounds read (CVE-ID: CVE-2014-9639)

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary condition in oggenc in vorbis-tools. A remote attacker can create a specially crafted WAV file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.


5) Division by zero (CVE-ID: CVE-2014-9638)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to divide-by-zero error in oggenc in vorbis-tools. A remote attacker can pass specially crafted WAV file with the number of channels set to zero to the application, trigger divide-by-zero error and crash the application.


Remediation

Install update from vendor's website.

References