CVE-2011-0480 Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of ser...
HighCVSS 9.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google chrome os | < 8.0.552.344 | 8.0.552.344 |
| Google Chrome | < 8.0.552.237 | 8.0.552.237 |
| debian linux | = 6.0 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 9.10 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 10.10 | No fix listed |
| debian/ffmpeg(Debian:12) | < 7:2.4.1-1 | 7:2.4.1-1 |
| debian/ffmpeg(Debian:13) | < 7:2.4.1-1 | 7:2.4.1-1 |
| debian/ffmpeg(Debian:14) | < 7:2.4.1-1 | 7:2.4.1-1 |
References
- [ffmpeg-devel] 20101229 [PATCH] Fix a couple of errors with bad Vorbis headers broken-link mailing-list
- bugs.debian.org issue-tracking third-party-advisory
- code.google.com exploit issue-tracking patch vendor-advisory
- codereview.chromium.org patch vendor-advisory
- codereview.chromium.org vendor-advisory
- ffmpeg.mplayerhq.hu third-party-advisory
- git.ffmpeg.org
- googlechromereleases.blogspot.com vendor-advisory
- 70463 broken-link vdb-entry
- roundup.ffmpeg.org broken-link
- roundup.ffmpeg.org broken-link
- 42951 third-party-advisory
- src.chromium.org broken-link
- DSA-2306 third-party-advisory vendor-advisory
- MDVSA-2011:061 third-party-advisory vendor-advisory
- 45788 third-party-advisory vdb-entry
- www.srware.net third-party-advisory
- USN-1104-1 third-party-advisory vendor-advisory
- chrome-vorbis-bo(64671) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:14380 signature third-party-advisory vdb-entry
- Debian Security Tracker CVE-2011-0480 vendor-advisory