CVE-2007-4065

published 2007-09-21

CVE-2007-4065: lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infinite loop) via a…

Priority P4 14 medium 4.3 CVSS 2.0

AV N AC M Au N C N I N A P

lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted OGG file, aka trac Changeset 13217.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	libvorbis	< libvorbis 1.2.0.dfsg-1 (bookworm)	libvorbis 1.2.0.dfsg-1 (bookworm)
debian	libvorbisidec	< libvorbis 1.2.0.dfsg-1 (bookworm)	libvorbis 1.2.0.dfsg-1 (bookworm)
xiph.org	libvorbis	<= 1.2.0	—
xiph.org	libvorbis	>= 0 < 1.2.0.dfsg-1	1.2.0.dfsg-1
xiph.org	libvorbis	>= 0 < 1.2.0.dfsg-1	1.2.0.dfsg-1
xiph.org	libvorbis	>= 0 < 1.2.0.dfsg-1	1.2.0.dfsg-1
xiph.org	libvorbis	>= 0 < 1.2.0.dfsg-1	1.2.0.dfsg-1

CVSS provenance

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:N/A:P

osv 4.3 MEDIUM

vendor_redhat 6.8 MEDIUM

vendor_debian 4.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.