CVE-2014-9638

Severity

50%

Complexity

99%

Confidentiality

48%

CWE-369: Divide By Zero

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

CWE-369: Divide By Zero

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

First reported 10 years ago

2015-01-23 15:59:00

Last updated 6 years ago

2018-10-30 16:27:00

Affected Software

Fedora 20

20

Fedora 21

21

OpenSUSE 13.1

13.1

OpenSUSE 13.2

13.2

xiph Vorbis-tools 1.4.0

1.4.0

References

FEDORA-2015-2335

FEDORA-2015-2330

openSUSE-SU-2015:0522

20150119 vorbis-tools issues

[oss-security] 20150121 CVE request: two issues in vorbis-tools

[oss-security] 20150122 Re: CVE request: two issues in vorbis-tools

72290

https://trac.xiph.org/ticket/2137

Exploit

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.