Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, which triggers a heap overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_linux | Redhat | 2.1 (including) | 2.1 (including) |
| Enterprise_linux | Redhat | 5 (including) | 5 (including) |
| Enterprise_linux | Redhat | 5.0 (including) | 5.0 (including) |
| Linux_advanced_workstation | Redhat | 2.1 (including) | 2.1 (including) |
| Red Hat Enterprise Linux 2.1 | RedHat | libvorbis-0:1.0rc2-9.el2 | * |
| Red Hat Enterprise Linux 3 | RedHat | libvorbis-1:1.0-10.el3 | * |
| Red Hat Enterprise Linux 4 | RedHat | libvorbis-1:1.1.0-3.el4_6.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | libvorbis-1:1.1.2-3.el5_1.2 | * |
| Libvorbis | Ubuntu | dapper | * |
| Libvorbis | Ubuntu | feisty | * |
| Libvorbis | Ubuntu | gutsy | * |
| Libvorbis | Ubuntu | hardy | * |