CVE-2008-2009

Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via…

published May 16, 2008

CVSS
—
EPSS
4%
Percentile
89.1
In the wild
Unconfirmed
What it is

Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during execution of the _make_decode_tree function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03512 · 89.1th percentile
Published
2008-05-16T06:54Z
EPSS history
Timeline
  • 16 MAY 06:54Z
    Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via…
    cvelistv5