MEDIUM
libvorbis: Stack-buffer overflow in render_line
Published Feb 9, 2012
4.3
MEDIUMCVSS 2.0
EPSS 1.47%
Description
Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Affected products
No data.
No data.
Red Hat Enterprise Linux 4
libvorbis
Not affected
Red Hat Enterprise Linux 5
libvorbis
Not affected
Red Hat Enterprise Linux 6
libvorbis
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | libvorbis | Not affected | n/a |
| Red Hat Enterprise Linux 5 | libvorbis | Not affected | n/a |
| Red Hat Enterprise Linux 6 | libvorbis | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Not vulnerable. This issue did not affect the versions of libvorbis as shipped with Red Hat Enterprise Linux 4, 5, and 6.
Weaknesses (2)
References (7)
- http://code.google.com/p/chromium/issues/detail?id=108416 x_refsource_CONFIRM
- http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html x_refsource_CONFIRM
- https://access.redhat.com/security/cve/CVE-2011-3960 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=788858 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2011-3960
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14921 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2011-3960
| Link | Providers | Tags |
|---|---|---|
| http://code.google.com/p/chromium/issues/detail?id=108416 | x_refsource_CONFIRM | |
| http://googlechromereleases.blogspot.com/2012/02/stable-channel-update.html | x_refsource_CONFIRM | |
| https://access.redhat.com/security/cve/CVE-2011-3960 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=788858 | Issue Tracking | |
| https://nvd.nist.gov/vuln/detail/CVE-2011-3960 | ||
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14921 | vdb-entrysignaturex_refsource_OVAL | |
| https://www.cve.org/CVERecord?id=CVE-2011-3960 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Chrome
Published Feb 9, 2012
Updated Aug 6, 2024
Reserved Oct 1, 2011
Link CVE-2011-3960
CISA Vulnrichment
Updated n/a