CVE-2013-0899 Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and....
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/opus(Debian:12) | < 0.9.14+20120615-1+nmu1 | 0.9.14+20120615-1+nmu1 |
| debian/opus(Debian:13) | < 0.9.14+20120615-1+nmu1 | 0.9.14+20120615-1+nmu1 |
| debian/opus(Debian:14) | < 0.9.14+20120615-1+nmu1 | 0.9.14+20120615-1+nmu1 |
| opus-codec opus | < 1.0.2 | 1.0.2 |
| Google Chrome | < 25.0.1364.97 | 25.0.1364.97 |
| Google Chrome | < 25.0.1364.99 | 25.0.1364.99 |
| opensuse | = 12.1 | No fix listed |
| opensuse | = 12.2 | No fix listed |
References
- Debian Security Tracker CVE-2013-0899 vendor-advisory
- googlechromereleases.blogspot.com
- openSUSE-SU-2013:0454 vendor-advisory
- opus-codec.org
- code.google.com
- codereview.chromium.org
- oval:org.mitre.oval:def:16027 signature vdb-entry
- src.chromium.org
- src.chromium.org
- bugs.debian.org issue-tracking