CVE-2007-4029

CVE-2007-4029 describes denial-of-service vulnerabilities in libvorbis 1.1.2 and potentially earlier versions, affecting libvorbis and rpath_linux products. Attackers can trigger an out-of-bounds read in vorbis_info_clear via an invalid mapping type or a segmentation fault in block.c through invalid blocksize values. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring moderate attack complexity over a network to achieve partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.