Libvorbis拒绝服务和内存破坏漏洞

Libvorbis是一款音频音乐编码格式处理库。 Libvorbis存在多个安全问题，远程攻击者可以利用漏洞进行堆覆盖，读冲突和函数指针覆盖攻击，导致拒绝服务或任意代码执行。 在res0.c的_01inverse()函数中非法blocksize_0和blocksize_1值可导致堆覆盖。 非法映射类型在info.c文件中的vorbis_info_clear()函数操作可导致越界表查询。 另外block.c中的非法blocksize可导致段错误。 Xiph.org libvorbis 1.1.2 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Turbolinux wizpy 0 Turbolinux Turbolinux Server 10.0 x86 Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 10.0.0 x64 Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux FUJI Turbolinux Turbolinux 10 F... TurboLinux Personal TurboLinux Multimedia Turbolinux Home Turbolinux FUJI 0 Turbolinux Appliance Server 2.0 TransSoft Broker FTP Server 8.0 Tellini Music Box 0 rPath rPath Linux 1 RedHat Enterprise Linux Desktop Workstation v. 5 client RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux v. 5 server RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux AS 4 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux AS 2.1 RedHat Desktop 4.0 RedHat Desktop 3.0 RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 RedHat Advanced Workstation for the Itanium Processor 2.1 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Linux Mandrake 2007.1 x86_64 MandrakeSoft Linux Mandrake 2007.1 MandrakeSoft Linux Mandrake 2007.0 x86_64 MandrakeSoft Linux Mandrake 2007.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Foresight Linux Foresight Linux 1.1 升级程序： Tellini Music Box 0 Tellini MusicBox-1.6.dmg <a href="http://files.tellini.info/MusicBox-1.6.dmg" target="_blank">http://files.tellini.info/MusicBox-1.6.dmg</a> TurboLinux Personal Turbolinux libvorbis-1.0-3.i586.rpm <a href="ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u" target="_blank">ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u</a> pdates/RPMS/libvorbis-1.0-3.i586.rpm Turbolinux Home Turbolinux libvorbis-1.0-3.i586.rpm <a href="ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u" target="_blank">ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u</a> pdates/RPMS/libvorbis-1.0-3.i586.rpm Turbolinux Turbolinux Server 10.0.0 x64 Turbolinux libvorbis-1.0.1-5.x86_64.rpm <a href="ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd" target="_blank">ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd</a> ates/RPMS/libvorbis-1.0.1-5.x86_64.rpm Turbolinux libvorbis-devel-1.0.1-5.x86_64.rpm <a href="ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd" target="_blank">ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd</a> ates/RPMS/libvorbis-devel-1.0.1-5.x86_64.rpm TurboLinux Multimedia Turbolinux libvorbis-1.0-3.i586.rpm <a href="ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u" target="_blank">ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u</a> pdates/RPMS/libvorbis-1.0-3.i586.rpm Xiph.org libvorbis 1.1.2 Xiph.org libvorbis-1.2.0.tar.bz2 <a href="http://downloads.xiph.org/releases/vorbis/libvorbis-1.2.0.tar.bz2" target="_blank">http://downloads.xiph.org/releases/vorbis/libvorbis-1.2.0.tar.bz2</a> Turbolinux Turbolinux Desktop 10.0 Turbolinux libvorbis-1.0-3.i586.rpm <a href="ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u" target="_blank">ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u</a> pdates/RPMS/libvorbis-1.0-3.i586.rpm TransSoft Broker FTP Server 8.0 Turbolinux libvorbis-1.0-3.i586.rpm <a href="ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd" target="_blank">ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd</a> ates/RPMS/libvorbis-1.0-3.i586.rpm Turbolinux libvorbis-devel-1.0-3.i586.rpm <a href="ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd" target="_blank">ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd</a> ates/RPMS/libvorbis-devel-1.0-3.i586.rpm