Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during execution of the _make_decode_tree function.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libvorbis | Xiph.org | 1.0-beta4 (including) | 1.0-beta4 (including) |
| Libvorbis | Xiph.org | 1.0-rc1 (including) | 1.0-rc1 (including) |
| Libvorbis | Xiph.org | 1.0-rc2 (including) | 1.0-rc2 (including) |
| Red Hat Enterprise Linux 2.1 | RedHat | libvorbis-0:1.0rc2-9.el2 | * |
| Libvorbis | Ubuntu | dapper | * |
| Libvorbis | Ubuntu | hardy | * |
| Libvorbis | Ubuntu | intrepid | * |
| Libvorbis | Ubuntu | jaunty | * |
| Libvorbis | Ubuntu | upstream | * |