libvorbis version 1.1.2 suffers from multiple memory corruption flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/58118/2007-003-libvorbis.txt
Source: https://packetstormsecurity.com/files/58118/Trustix-Secure-Linux-Security-Advisory-2007.3.html