CVE-2015-6749

vorbis-tools < 1.4.0 - Denial of Service via Crafted AIFF File

Title source: llm
STIX 2.1

Description

Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file.

References (10)

Core 10
Core References
Mailing List mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2015/q3/455
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1258424
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166424.html
Mailing List mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2015/q3/457
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-10/msg00013.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1258443
Exploit x_refsource_confirm
https://trac.xiph.org/ticket/2212
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165555.html

Scores

EPSS 0.0379
EPSS Percentile 88.7%

Details

CWE
CWE-119
Status published
Products (1)
xiph/vorbis-tools < 1.4.0
Published Sep 21, 2015
Tracked Since Feb 18, 2026