CVE:CVE-2014-9639
CNNVD:CNNVD-201501-593
vorbis-tools是一套Ogg（一种音频压缩格式）vorbis工具。
vorbis-tools 1.4.0版本的oggenc中存在整数溢出漏洞。远程攻击者可借助WAV文件中特制的通道数利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade xiph vorbis-tools to a higher version than 1.4.0,and avoid the version 1.4.0; Upgrade fedoraproject fedora to a higher version than 20,21,and avoid the version 20,21; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2