← Back to CVEs

CVE-2007-4066

N/A

Description

Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.exe related to the _psy_noiseguards_8 array.

CVE Details

CVSS v3.1 ScoreN/A

Published9/21/2007

Last Modified4/23/2026

Sourcenvd

Honeypot Sightings0

Affected Products

xiph.org:libvorbis

Weaknesses (CWE)

CWE-119

References

http://secunia.com/advisories/24923(secalert@redhat.com)

http://secunia.com/advisories/26865(secalert@redhat.com)

http://secunia.com/advisories/27099(secalert@redhat.com)

http://secunia.com/advisories/27170(secalert@redhat.com)

http://secunia.com/advisories/27439(secalert@redhat.com)

http://secunia.com/advisories/28614(secalert@redhat.com)

http://security.gentoo.org/glsa/glsa-200710-03.xml(secalert@redhat.com)

http://securitytracker.com/id?1018712(secalert@redhat.com)

http://svn.xiph.org/trunk/vorbis/CHANGES(secalert@redhat.com)

http://www.debian.org/security/2008/dsa-1471(secalert@redhat.com)

http://www.mandriva.com/security/advisories?name=MDKSA-2007:194(secalert@redhat.com)

http://www.novell.com/linux/security/advisories/2007_23_sr.html(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2007-0845.html(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2007-0912.html(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=249780(secalert@redhat.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11453(secalert@redhat.com)

https://trac.xiph.org/changeset/13162(secalert@redhat.com)

https://trac.xiph.org/changeset/13168(secalert@redhat.com)

https://trac.xiph.org/changeset/13169(secalert@redhat.com)

https://trac.xiph.org/changeset/13170(secalert@redhat.com)

https://trac.xiph.org/changeset/13172(secalert@redhat.com)

https://trac.xiph.org/changeset/13211(secalert@redhat.com)

https://trac.xiph.org/changeset/13215(secalert@redhat.com)

https://trac.xiph.org/ticket/300(secalert@redhat.com)

https://trac.xiph.org/ticket/853(secalert@redhat.com)

http://secunia.com/advisories/24923(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/26865(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/27099(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/27170(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/27439(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/28614(af854a3a-2127-422b-91ae-364da2661108)

http://security.gentoo.org/glsa/glsa-200710-03.xml(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1018712(af854a3a-2127-422b-91ae-364da2661108)

http://svn.xiph.org/trunk/vorbis/CHANGES(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2008/dsa-1471(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDKSA-2007:194(af854a3a-2127-422b-91ae-364da2661108)

http://www.novell.com/linux/security/advisories/2007_23_sr.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2007-0845.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2007-0912.html(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=249780(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11453(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/changeset/13162(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/changeset/13168(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/changeset/13169(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/changeset/13170(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/changeset/13172(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/changeset/13211(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/changeset/13215(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/ticket/300(af854a3a-2127-422b-91ae-364da2661108)

https://trac.xiph.org/ticket/853(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.