CVE-2014-0044 | BDVDB-2026-59826 Detail

Description#

The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service (crash) via a crafted length prefix value, which triggers a NULL pointer dereference or a heap-based buffer over-read (aka "out-of-bounds array access").

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.debian.org/security/2014/dsa-2854
http://lists.opensuse.org/opensuse-updates/2014-02/msg00063.html
http://osvdb.org/102904
http://mumble.info/security/Mumble-SA-2014-001.txt

Exploit#

No public exploit known

History#

Version 12014-02-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.