CVE

Id
48392  
CVE No.
CVE-2011-0480  
Status
Candidate  
Description
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.  
Phase
Assigned (20110114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
525508 48392 CVE-2011-0480 MLIST:[ffmpeg-devel] 20101229 [PATCH] Fix a couple of errors with bad Vorbis headers  View
525509 48392 CVE-2011-0480 URL:http://article.gmane.org/gmane.comp.video.ffmpeg.devel/122703  View
525510 48392 CVE-2011-0480 CONFIRM:http://code.google.com/p/chromium/issues/detail?id=68115  View
525511 48392 CVE-2011-0480 CONFIRM:http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html  View
525512 48392 CVE-2011-0480 CONFIRM:http://codereview.chromium.org/6069005  View
525513 48392 CVE-2011-0480 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610550  View
525514 48392 CVE-2011-0480 CONFIRM:http://codereview.chromium.org/5964011  View
525515 48392 CVE-2011-0480 CONFIRM:http://git.ffmpeg.org/?p=ffmpeg.git;a=commit;h=13184036a6b1b1d4b61c91118c0896e9ad4634c3  View
525516 48392 CVE-2011-0480 CONFIRM:http://roundup.ffmpeg.org/issue2548  View
525517 48392 CVE-2011-0480 CONFIRM:http://roundup.ffmpeg.org/issue2550  View
525518 48392 CVE-2011-0480 CONFIRM:http://src.chromium.org/viewvc/chrome?view=rev&revision=70200  View
525519 48392 CVE-2011-0480 CONFIRM:http://www.srware.net/forum/viewtopic.php?f=18&t=2054  View
525520 48392 CVE-2011-0480 CONFIRM:http://ffmpeg.mplayerhq.hu/  View
525521 48392 CVE-2011-0480 DEBIAN:DSA-2306  View
525522 48392 CVE-2011-0480 URL:http://www.debian.org/security/2011/dsa-2306  View
525523 48392 CVE-2011-0480 MANDRIVA:MDVSA-2011:061  View
525524 48392 CVE-2011-0480 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:061  View
525525 48392 CVE-2011-0480 UBUNTU:USN-1104-1  View
525526 48392 CVE-2011-0480 URL:http://www.ubuntu.com/usn/usn-1104-1/  View
525527 48392 CVE-2011-0480 BID:45788  View
525528 48392 CVE-2011-0480 URL:http://www.securityfocus.com/bid/45788  View
525529 48392 CVE-2011-0480 OSVDB:70463  View
525530 48392 CVE-2011-0480 URL:http://osvdb.org/70463  View
525531 48392 CVE-2011-0480 OVAL:oval:org.mitre.oval:def:14380  View
525532 48392 CVE-2011-0480 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14380  View
525533 48392 CVE-2011-0480 SECUNIA:42951  View
525534 48392 CVE-2011-0480 URL:http://secunia.com/advisories/42951  View
525535 48392 CVE-2011-0480 XF:chrome-vorbis-bo(64671)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32605 JVNDB-2011-002845 Google Chrome および Chrome OS における任意のコードを実行される脆弱性 Google Chrome および Chrome OS は、音声データを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-0485 48392 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002845.html  View