Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Libvorbis 分段错误及拒绝服务漏洞
Vulnerability Description
libvorbis是开源的音频音乐编码解码函数库。 libvorbis在处理畸形格式的音频文件时存在漏洞，攻击者可能利用此漏洞诱使用户处理畸形文档控制用户系统。 info.c文件的vorbis_info_clear()函数在执行清理操作期间，无效的映射类型可能导致越界查询分发表，且偏移是用户可控的。 如果提供无效的blocksize值还会导致block.c文件中读操作出现分段错误。
CVSS Information
N/A
Vulnerability Type
N/A