Search for packages
| purl | pkg:deb/debian/libvorbisidec@1.0.2%2Bsvn18153-0.2 |
| Next non-vulnerable version | 1.2.1+git20180316-3 |
| Latest non-vulnerable version | 1.2.1+git20180316-3 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bxdr-5t7k-rbdn
Aliases: CVE-2018-5147 |
The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms.*Update: The 52.7.2 source release accidentally did not include this patch (the Mozilla-produced 52.7.2 binaries are fine). Anyone building 52.7.2 on ARM should use revision 5cd5586a2f48424a9031a3fa4c782954a9df9a52 instead of the released source. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-12w2-ffkf-7bfv | vorbis: insufficient validation of Huffman tree causing memory corruption in _make_decode_tree() |
CVE-2008-2009
|
| VCID-55cd-r9yc-nfan | Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2009-3379
|
| VCID-c3vm-d9f5-2kcj | Multiple vulnerabilities in libvorbis might lead to the execution of arbitrary code. |
CVE-2008-1419
|
| VCID-gajm-zb2s-ukgz | Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2012-0444
|
| VCID-mddv-hvgp-u3aa | Multiple vulnerabilities in libvorbis might lead to the execution of arbitrary code. |
CVE-2008-1423
|