File _patchinfo of Package patchinfo.import5850
<patchinfo incident="libvorbis" version="5850"> <issue tracker="bnc" id="747912" /> <issue tracker="CVE" id="CVE-2012-0444" /> <category>security</category> <rating>low</rating> <summary>libvorbis: fixed a heap based buffer overflow</summary> <description>Specially crafted ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code (CVE-2012-0444). </description> <packager>adrianSuSE</packager> </patchinfo>