oss-sec mailing list archives

CVE request: two issues in vorbis-tools


From: Martin Prpic <mprpic () redhat com>
Date: Wed, 21 Jan 2015 13:50:46 +0100

Hi,

Two issues were reported in vorbis-tools on Full Disclosure:

http://seclists.org/fulldisclosure/2015/Jan/78

Issues in question:

https://trac.xiph.org/ticket/2137
-- a divide-by-zero issue leading to a crash

https://trac.xiph.org/ticket/2136
-- an integer overflow leading to an out-of-bounds memory read

Thank you!

-- 
Martin Prpič / Red Hat Product Security


Current thread: