NVD

Id
55260  
Name
CVE-2007-3106  
Description
lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_0 and (2) blocksize_1 values, which trigger a "heap overwrite" in the _01inverse function in res0.c. NOTE: this issue has been RECAST so that CVE-2007-4029 handles additional vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-26  
Modified Date
2011-10-11  
Seq
2007-3106  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280854 55260 CVE-2007-3106 oval:org.mitre.oval:def:11449  View
280855 55260 CVE-2007-3106 GLSA-200710-03  View
280856 55260 CVE-2007-3106 DSA-1471  View
280857 55260 CVE-2007-3106 http://www.isecpartners.com/advisories/2007-003-libvorbis.txt  View
280858 55260 CVE-2007-3106 MDKSA-2007:167-1  View
280859 55260 CVE-2007-3106 RHSA-2007:0845  View
280860 55260 CVE-2007-3106 RHSA-2007:0912  View
280861 55260 CVE-2007-3106 20070726 libvorbis 1.1.2 - Multiple memory corruption flaws  View
280862 55260 CVE-2007-3106 25082  View
280863 55260 CVE-2007-3106 http://www.tellini.org/blog/archives/32-Music-Box-1.6.html  View
280864 55260 CVE-2007-3106 USN-498-1  View
280865 55260 CVE-2007-3106 ADV-2007-2698  View
280866 55260 CVE-2007-3106 ADV-2007-2760  View
280867 55260 CVE-2007-3106 libvorbis-inverse-code-execution(35622)  View
280868 55260 CVE-2007-3106 https://bugzilla.redhat.com/show_bug.cgi?id=245991  View
280869 55260 CVE-2007-3106 https://bugzilla.redhat.com/show_bug.cgi?id=249780  View
280870 55260 CVE-2007-3106 https://issues.rpath.com/browse/RPL-1590  View
280871 55260 CVE-2007-3106 https://trac.xiph.org/changeset/13160  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52040 JVNDB-2007-000703 libvorbis の res0.c におけるヒープ領域を上書きする脆弱性 libvorbis の lib/info.c には、blocksize_0 および blocksize_1 変数の取り扱いに不備があり、res0.c の _01inverse() 関数において、ヒープ領域を上書きする脆弱性が存在します。 CVE-2007-3106 26461 CVE-2007-3106 55260 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000703.html 2007-07-26 2007-11-29 View