Solution
Please Install the Updated Packages.
Insight
Specially crafted ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code (CVE-2012-0444).
Affected
libvorbis on openSUSE 11.4
Severity
Classification
-
CVE CVE-2012-0444 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities