REDHAT-BUG-440709: Integer Overflow

Published Apr 4, 2008

Updated

Will Drewry of the Google Security Team reported an issue in OGG Vorbis library, that can cause an integer overflow in the computation of quantvals and of the space required for quantlist leading to a heap overflow.

Check for the overflow added in the fix. Files are rejected if the total virtual space of the codebook exceeds 24 bits.

Affected Software

1 affected component

xiph OGG Vorbis

Event History

Apr 4, 2008

Data Sourced

via Red Hat·03:33 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-440709?

The severity of REDHAT-BUG-440709 is classified as high due to the potential for heap overflow exploitation.

How do I fix REDHAT-BUG-440709?

To fix REDHAT-BUG-440709, you should update the OGG Vorbis library to the latest version available from the vendor.

What is the impact of REDHAT-BUG-440709?

The impact of REDHAT-BUG-440709 may result in application crashes or remote code execution due to the heap overflow.

Which software is affected by REDHAT-BUG-440709?

REDHAT-BUG-440709 affects the Xiph OGG Vorbis library used for audio codec processing.

Who reported REDHAT-BUG-440709?

REDHAT-BUG-440709 was reported by Will Drewry of the Google Security Team.