Detections
Analytics

GLSA-200710-03 : libvorbis: Multiple vulnerabilities

medium Nessus Plugin ID 26943

Synopsis

The remote Gentoo host is missing one or more security-related patches.

Description

The remote host is affected by the vulnerability described in GLSA-200710-03 (libvorbis: Multiple vulnerabilities)

 David Thiel of iSEC Partners discovered a heap-based buffer overflow in the _01inverse() function in res0.c and a boundary checking error in the vorbis_info_clear() function in info.c (CVE-2007-3106 and CVE-2007-4029). libvorbis is also prone to several Denial of Service vulnerabilities in form of infinite loops and invalid memory access with unknown impact (CVE-2007-4065 and CVE-2007-4066).
 Impact :

 A remote attacker could exploit these vulnerabilities by enticing a user to open a specially crafted Ogg Vorbis file or network stream with an application using libvorbis. This might lead to the execution of arbitrary code with privileges of the user playing the file or a Denial of Service by a crash or CPU consumption.
 Workaround :

 There is no known workaround at this time.

Solution

All libvorbis users should upgrade to the latest version:
 # emerge --sync # emerge --ask --oneshot --verbose '>=media-libs/libvorbis-1.2.0'

See Also

https://security.gentoo.org/glsa/200710-03

Plugin Details

Severity: Medium

ID: 26943

File Name: gentoo_GLSA-200710-03.nasl

Version: 1.15

Type: local

Published: 10/9/2007

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:gentoo:linux, p-cpe:/a:gentoo:linux:libvorbis

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Patch Publication Date: 10/7/2007

Vulnerability Publication Date: 7/25/2007

Reference Information

CVE: CVE-2007-3106, CVE-2007-4029, CVE-2007-4065, CVE-2007-4066

CWE: 119, 399

GLSA: 200710-03