NVD

Id
47717  
Name
CVE-2009-0385  
Description
Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL pointer dereference.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-02-02  
Modified Date
2011-03-07  
Seq
2009-0385  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239149 47717 CVE-2009-0385 http://git.ffmpeg.org/?p=ffmpeg;a=commitdiff;h=72e715fb798f2cb79fd24a6d2eaeafb7c6eeda17  View
239150 47717 CVE-2009-0385 GLSA-200903-33  View
239151 47717 CVE-2009-0385 http://svn.mplayerhq.hu/ffmpeg/trunk/libavformat/4xm.c?r1=16838&r2=16846&pathrev=16846  View
239152 47717 CVE-2009-0385 http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=16846  View
239153 47717 CVE-2009-0385 DSA-1781  View
239154 47717 CVE-2009-0385 DSA-1782  View
239155 47717 CVE-2009-0385 MDVSA-2009:297  View
239156 47717 CVE-2009-0385 20090128 [TKADV2009-004] FFmpeg Type Conversion Vulnerability  View
239157 47717 CVE-2009-0385 33502  View
239158 47717 CVE-2009-0385 http://www.trapkit.de/advisories/TKADV2009-004.txt  View
239159 47717 CVE-2009-0385 USN-734-1  View
239160 47717 CVE-2009-0385 ADV-2009-0277  View
239161 47717 CVE-2009-0385 ffmpeg-fourxmreadheader-code-execution(48330)  View
239162 47717 CVE-2009-0385 FEDORA-2009-3428  View
239163 47717 CVE-2009-0385 FEDORA-2009-3433  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40412 JVNDB-2009-001418 FFmpeg に含まれる libavformat/4xm.c の fourxm_read_header 関数における整数符号エラーの脆弱性 FFmpeg に含まれる libavformat/4xm.c の fourxm_read_header 関数には、整数符号エラーの脆弱性が存在します。 CVE-2009-0385 37816 CVE-2009-0385 47717 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001418.html 2009-02-02 2009-06-30 View