CVE-2017-11333

The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM)…

mitre·CWE-476·Published 2017-07-31

CVSS

—

EPSS

0.05

KEV

Exploits

cve.orgen

160 chars

The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

NVDen

160 chars

The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

NVDes

206 chars

La función vorbis_analysis_wrote en la biblioteca lib/block.c en Xiph.Org libvorbis versión 1.3.5, permite a los atacantes remotos causar una denegación de servicio (OOM) por medio de un archivo wav creado.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
3.0	Primary	NVD	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H