CVE-2008-1420
Summary
by MITRE
Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 08/10/2019
Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xx Xxx-xxxx-xxxx Xxxxxxxxxx X Xxxxxxxx Xxxxxxx Xxxxxxxx Xxxx Xxxxxx Xxx Xxxx.xxx Xxxxxxxxx Xxxxxxx Xxxxxxx X.x.x Xxx Xxxxxxx. Xxxx Xxxxx Xxxxxxxxx Xxxxxx Xxx Xxxxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xxxxxx, Xxxxxxxx Xxxxxxxx Xx Xx Xxxxxxxx, Xxxxx Xxx Xxxxxxxxx Xxxxxxxxxx Xx Xxx Xxxxxx Xxxxx Xxxxxxxxxxx Xxxxxx. Xxx Xxxx Xxxxxx Xxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxx Xxxxx Xxxx Xxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxx, Xxxxxxxx X Xxxxxxxxx Xxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxx Xxxxxxx Xxxxxx Xxx Xxxx Xxxxxx Xx Xxxxxxx Xxxxxxxxxx Xxxxxx. Xxxx Xxxxxxxx Xxxxxxxxxxxxx Xxxxx Xxxxx Xxx Xxx-xxx Xxxxxxxx Xx Xxxxxxx Xxxxxxxx Xx Xxxxxxxxxx, Xxxxx Xx X Xxxx-xxxxxxxxxx Xxxxx Xx Xxxxxxxxxxxxxxx Xxxx Xxx Xxxx Xx Xxxxxx Xxxxxxxxxx Xxx Xxxxxxxxx Xxxx Xxxxxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxxxxxxx X Xxxxxxxxx Xxx Xxxx Xxxx Xxxxxxxxx Xx Xxxxxxxxx Xxxxxxxx Xxxx Xxxxxxx Xxx Xxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxx Xxxxxxx. Xxxx Xxx Xxxxxxxxx Xxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxxxxx Xxxxx Xx Xxxxx Xxxxxxxxx Xxxxxxx Xxxxxx, Xx Xxx Xxxxxx Xx Xxxx Xxxxxxxxxx, Xxxxx Xxx Xxxxxxx Xxxxxx Xxxx Xxxxxx Xxx Xxxxxxxxx Xxxxxx Xxxxxxxxxx. Xxxx Xxxx Xxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxxxxx Xxx Xxxxxxxxx Xx Xxxxxxxxxx Xxxxxx Xxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxx Xxxx Xxx Xxxxxxxxxx Xx Xxx Xxxxxx Xxxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xxxxxxx Xx Xxx Xx Xxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxx Xxxxxxxx Xxxxxxxxx, Xxxxxx Xx Xx Xxxxxxxxxx Xxxxxx Xxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxx-xxxx-xxxx Xxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxx Xxxx Xxxx Xx Xxx Xxxxxxxxx Xxxxxxx Xxx Xxxxx Xxxxxxxxxx, Xxxxxxxxx Xxxxx Xxxxxxx, Xxx Xxxxxxxx, Xxxxxxxxxx Xxxxxxxxxx, Xxx Xxxxxxx Xxxxxxxx Xxxxxxx. Xxx Xxxxxxxxxxx Xxxx Xxxxxxxxx Xxx Xxxxx Xxxxx Xxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xx Xxxx Xxxxxx Xxxxxx, Xxxxxxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxxx Xx Xxxx Xxxxxxxxxxxx Xxxx Xxxxxxxxx Xxxxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxxx Xx Xxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx, Xx Xxxxx Xxxxxxxxxx Xxxxx Xxxxxx Xxxxxxxxx Xxxx Xxxx Xxxxxxxx Xxxxxxx. Xxxxxxxx Xxxxxxxxxxx Xxxx Xxxxxxxxxx Xxxx Xxxxx Xx X Xxxx-xxxxxxxx Xxxxxxxxxxxxx Xxx Xx Xxx Xxxxxx Xxxxxxxxxxxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxx Xxx-xxxx-xxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxx Xx Xxxxxxxxx Xxxxxxx X.x.x Xx Xxxxx, Xxxxx Xxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxxxx Xx Xxxxxxx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xxxxx Xxxxxxxxxx. Xxxxxx Xxxxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxxxxx Xxx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxx Xxxxxxxx. Xxxxxxxxxxxx, Xxxxxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxx Xxxxxxxx Xxx Xxxx Xxxxxxxx Xxxxxx Xxxxxxxxxx Xxx Xxxxxxx Xx Xxxxxxxxxx Xxxxx Xx Xxxxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxx Xxxxxx Xxxxxxxx Xx Xxxxx Xxxxxxxx Xx Xxxxxxxxxx Xxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxxxxx Xx Xxxxxxxx Xx Xxxxxx Xxxxxx Xxxxxxxxx Xxx Xxxxxxxxx Xxx Xxx&xx Xxxxxxxxx'x Xxxxxxxx Xx Xxxxxxxxxx Xxxxxx Xxxxxxxxxx Xxxxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxxxx Xxx Xxxxx Xxxxxxxxxx. Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxxx Xxxxxx Xx Xxxxxxxxx Xx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxxx Xxxxxx Xx Xxxxx Xxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxx.