Mandriva Linux Security Advisory : libvorbis (MDVSA-2008:102)
High Nessus Plugin ID 36438
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionWill Drewry of the Google Security Team reported several vulnerabilities in how libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it would cause an application linked to libvorbis to crash or possibly execute arbitrary code when opened (CVE-2008-1419, CVE-2008-1420, CVE-2008-1423).
The updated packages have been patched to correct these issues.
SolutionUpdate the affected packages.