lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_0 and (2) blocksize_1 values, which trigger a "heap overwrite" in the _01inverse function in res0.c. NOTE: this issue has been RECAST so that CVE-2007-4029 handles additional vectors.
CVSS Details
- CVSS 3.1 Base Score: 5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvorbisUpgrade libvorbisidec | Jul 30, 2024 | Jul 26, 2007 |
| Freebsd | — | Upgrade libvorbis | Dec 10, 2025 | Jul 26, 2007 |
| Gentoo Linux | — | Upgrade media-libs/libvorbis. | Oct 30, 2017 | Jul 26, 2007 |
| Oracle_linux | — | Upgrade libvorbis-develUpgrade libvorbis | Oct 16, 2024 | Jul 26, 2007 |
| Suse | — | Upgrade libvorbisfile3Upgrade libvorbis-docUpgrade libvorbis0Upgrade libvorbis-32bitUpgrade libvorbisenc2-x86-64-v3Upgrade libvorbisenc2Upgrade libvorbis-develUpgrade libvorbisfile3-x86-64-v3Upgrade libvorbisUpgrade libvorbis0-x86-64-v3Upgrade libvorbis-x86 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libvorbis0a | Nov 8, 2024 | Jul 26, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub