Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-4029 Details

Description

libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://bugzilla.redhat.com/show_bug.cgi?id=249780	CVE
http://secunia.com/advisories/24923	CVE
http://secunia.com/advisories/26087	CVE
http://secunia.com/advisories/26232	CVE
http://secunia.com/advisories/26299	CVE
http://secunia.com/advisories/26429	CVE
http://secunia.com/advisories/26535	CVE
http://secunia.com/advisories/26865	CVE
http://secunia.com/advisories/27099	CVE
http://secunia.com/advisories/27439	CVE
http://secunia.com/advisories/28614	CVE
http://security.gentoo.org/glsa/glsa-200710-03.xml	CVE
http://securitytracker.com/id?1018712	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/35623	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/35624	CVE
https://issues.rpath.com/browse/RPL-1590	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10570	CVE
http://www.debian.org/security/2008/dsa-1471	CVE
http://www.isecpartners.com/advisories/2007-003-libvorbis.txt	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2007:167-1	CVE
http://www.novell.com/linux/security/advisories/2007_23_sr.html	CVE
http://www.redhat.com/support/errata/RHSA-2007-0845.html	CVE
http://www.redhat.com/support/errata/RHSA-2007-0912.html	CVE
http://www.securityfocus.com/archive/1/474729/100/0/threaded	CVE
http://www.securityfocus.com/bid/25082	CVE
http://www.tellini.org/blog/archives/32-Music-Box-1.6.html	CVE
http://www.ubuntu.com/usn/usn-498-1	CVE
http://www.vupen.com/english/advisories/2007/2698	CVE
http://www.vupen.com/english/advisories/2007/2760	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=249780	[email protected]
http://secunia.com/advisories/24923	[email protected]
http://secunia.com/advisories/26087	[email protected]
http://secunia.com/advisories/26232	[email protected]
http://secunia.com/advisories/26299	[email protected]
http://secunia.com/advisories/26429	[email protected]
http://secunia.com/advisories/26535	[email protected]
http://secunia.com/advisories/26865	[email protected]
http://secunia.com/advisories/27099	[email protected]
http://secunia.com/advisories/27439	[email protected]
http://secunia.com/advisories/28614	[email protected]
http://security.gentoo.org/glsa/glsa-200710-03.xml	[email protected]
http://securitytracker.com/id?1018712	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/35623	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/35624	[email protected]
https://issues.rpath.com/browse/RPL-1590	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10570	[email protected]
http://www.debian.org/security/2008/dsa-1471	[email protected]
http://www.isecpartners.com/advisories/2007-003-libvorbis.txt	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2007:167-1	[email protected]
http://www.novell.com/linux/security/advisories/2007_23_sr.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2007-0845.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2007-0912.html	[email protected]
http://www.securityfocus.com/archive/1/474729/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/25082	[email protected]
http://www.tellini.org/blog/archives/32-Music-Box-1.6.html	[email protected]
http://www.ubuntu.com/usn/usn-498-1	[email protected]
http://www.vupen.com/english/advisories/2007/2698	[email protected]
http://www.vupen.com/english/advisories/2007/2760	[email protected]

see all 58 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
rpath rpath linux	1 1.0.1 1.0.2 1.0.3 1.0.4
CPE cpe:2.3:o:rpath:rpath_linux:1:::::::* cpe:2.3:o:rpath:rpath_linux:1.0.1:::::::* cpe:2.3:o:rpath:rpath_linux:1.0.2:::::::* cpe:2.3:o:rpath:rpath_linux:1.0.3:::::::* cpe:2.3:o:rpath:rpath_linux:1.0.4:::::::* cpe:2.3:o:rpath:rpath_linux:1.0.5:::::::* cpe:2.3:o:rpath:rpath_linux:1.0.6:::::::* Remediation No remediation found in references.
libvorbis libvorbis	1.1.2
CPE cpe:2.3:a:libvorbis:libvorbis:1.1.2:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 15, 2018	CVE Modified	[email protected]
Sep 29, 2017	CVE Modified	[email protected]
Jul 29, 2017	CVE Modified	[email protected]
Jul 27, 2007	Initial Analysis	[email protected]