NVD

Id
48207  
Name
CVE-2009-0893  
Description
Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a "missing resync marker range check" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-02  
Modified Date
2009-06-04  
Seq
2009-0893  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242275 48207 CVE-2009-0893 http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c  View
242276 48207 CVE-2009-0893 http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81  View
242277 48207 CVE-2009-0893 35156  View
242278 48207 CVE-2009-0893 ADV-2009-1468  View
242279 48207 CVE-2009-0893 http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews[backPid]=64&tx_ttnews[tt_news]=7  View
242280 48207 CVE-2009-0893 https://www.it-isac.org/postings/cyber/alertdetail.php?id=4634&selyear=2009&menutype=menupublic  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57798 JVNDB-2007-006490 Windows Media Player など使用される Xvid の xvidcore/src/decoder.c におけるヒープベースのバッファオーバーフローの脆弱性 Windows Media Player およびその他のアプリケーションで使用される Xvid の xvidcore ライブラリの xvidcore/src/decoder.c は、"範囲チェックの再同期マーカー欠如"、および (1) decoder_iframe、(2) decoder_pframe、および (3) decoder_bframe 関数に関する処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0893 38324 CVE-2009-0893 48207 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006490.html 2007-04-16 2012-12-20 View