libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvorbisUpgrade libvorbis-devel | Dec 1, 2016 | Aug 4, 2009 |
| Debian | — | Upgrade libvorbisidecUpgrade libvorbis | Jul 30, 2024 | Aug 4, 2009 |
| Gentoo Linux | — | Upgrade media-libs/libvorbis. | Oct 30, 2017 | Aug 4, 2009 |
| Mfsa2009 45 | — | Upgrade to Mozilla Firefox version 3.0.13Upgrade to Mozilla Firefox version 3.5.2 | Jun 14, 2012 | Aug 4, 2009 |
| Oracle_linux | — | Upgrade libvorbisUpgrade libvorbis-devel | Oct 16, 2024 | Aug 4, 2009 |
| Suse | — | Upgrade libvorbis-docUpgrade mozilla-xulrunner191-32bitUpgrade libidl-x86Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-nssUpgrade libvorbis-32bitUpgrade orbit2Upgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-translationsUpgrade gconf2-32bitUpgrade libvorbisUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192Upgrade mozilla-nsprUpgrade libvorbis-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner190-32bitUpgrade gconf2Upgrade libvorbis-develUpgrade gconf2-x86Upgrade orbit2-32bitUpgrade libidl-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefoxUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner190Upgrade orbit2-x86Upgrade mozilla-xulrunner191Upgrade mozilla-nss-toolsUpgrade libfreebl3-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade libidlUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner191-translationsUpgrade libfreebl3Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner190-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libvorbis0a | Nov 8, 2024 | Aug 4, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub