seclists.org
http://seclists.org/fulldisclosure/2017/Jul/82 CVE-2017-11333
MEDIUM
libvorbis 1.3.5 - Multiple Vulnerabilities
Record summary
CVE-2017-11333 has a selected CVSS score of 5.5 (medium); EIP currently links 1 catalogued exploit.
Description
The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBlibvorbis 1.3.5 - Multiple VulnerabilitiesExploitDB exploitby qflb.wuNot analyzed1 file
References
5[debian-lts-announce] 20180430 [SECURITY] [DLA 1368-1] libvorbis security updatemailing list
https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html [debian-lts-announce] 20191217 [SECURITY] [DLA 2039-1] libvorbis security updatemailing list
https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-11333 42399exploit
https://www.exploit-db.com/exploits/42399