NVD

Id
1377  
Name
CVE-2008-1423  
Description
Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, which triggers a heap overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-05-16  
Modified Date
2016-11-08  
Seq
2008-1423  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8861 1377 CVE-2008-1423 SUSE-SR:2008:012  View
8862 1377 CVE-2008-1423 oval:org.mitre.oval:def:9851  View
8863 1377 CVE-2008-1423 GLSA-200806-09  View
8864 1377 CVE-2008-1423 DSA-1591  View
8865 1377 CVE-2008-1423 MDVSA-2008:102  View
8866 1377 CVE-2008-1423 RHSA-2008:0270  View
8867 1377 CVE-2008-1423 RHSA-2008:0271  View
8868 1377 CVE-2008-1423 29206  View
8869 1377 CVE-2008-1423 1020029  View
8870 1377 CVE-2008-1423 USN-682-1  View
8871 1377 CVE-2008-1423 ADV-2008-1510  View
8872 1377 CVE-2008-1423 libvorbis-quantvals-quantlist-bo(42403)  View
8873 1377 CVE-2008-1423 https://bugzilla.redhat.com/show_bug.cgi?id=440709  View
8874 1377 CVE-2008-1423 FEDORA-2008-3934  View
8875 1377 CVE-2008-1423 FEDORA-2008-3898  View
8876 1377 CVE-2008-1423 FEDORA-2008-3910  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46059 JVNDB-2008-001369 libvorbis の quantvals および quantlist 計算における整数オーバーフローの脆弱性 libvorbis には quantvals および quantlist の計算に問題があり、コードブックに対する大きな仮想スペースを持つ巧妙に細工された OGG ファイルにより、整数オーバーフローが発生する脆弱性が存在します。 CVE-2008-1423 31536 CVE-2008-1423 1377 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001369.html 2008-05-16 2008-06-09 View