Ubuntu Security Notice USN-682-1 – It was discovered that libvorbis did not correctly handle certain malformed sound files. If a user were tricked into opening a specially crafted sound file with an application that uses libvorbis, an attacker could execute arbitrary code with the user’s privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72493/USN-682-1.txt
Source: https://packetstormsecurity.com/files/72493/Ubuntu-Security-Notice-682-1.html