CVE-2007-4065: xiph.org libvorbis

EPSS trend

Probability

1.68%

Chance of exploitation in the next 30 days

Percentile

77%

Versus all other CVEs

30-day change

0.00 pp

From 1.68% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

16 links

bugzilla.redhat.com/show_bug.cgi?id=249780X Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2007-0912.htmlVendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-200710-03.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/27170Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1018712VDB EntryX Refsource SECTRACKPatch
svn.xiph.org/trunk/vorbis/CHANGESX Refsource MISC
www.mandriva.com/security/advisories?name=MDKSA-2007:194Vendor AdvisoryX Refsource MANDRIVA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9173VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/24923Third Party AdvisoryX Refsource SECUNIA
trac.xiph.org/changeset/13217X Refsource MISCPatch

Show all 16 references

secunia.com/advisories/27439Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27099Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26865Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.novell.com/linux/security/advisories/2007_23_sr.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/support/errata/RHSA-2007-0845.htmlVendor AdvisoryX Refsource REDHAT
security-tracker.debian.org/tracker/CVE-2007-4065Advisory

Related vulnerabilities

CVE-2018-10393alpinelibvorbis+82.38%8y ago26-04-2018 05:00bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10392alpinelibvorbis+163.32%8y ago26-04-2018 05:00mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.CVE-2007-4066debianlibvorbis+21.84%19y ago21-09-2007 18:00Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.exe related to the _psy_noiseguards_8 array.CVE-2020-20412stepmaniastepmania+11.04%5y ago26-12-2020 00:00lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a crafted OGG file. NOTE: this may overlap CVE-2018-5146.CVE-2008-2009canonicalubuntu_linux+33.51%18y ago16-05-2008 06:54Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during execution of the _make_decode_tree function.CVE-2008-1423debianlibvorbis+28.13%18y ago16-05-2008 06:54Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, which triggers a heap overflow.

All vulnerabilities inlibvorbis

CVE-2007-4065: xiph.org libvorbis

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References