NVD

Id
51749  
Name
CVE-2009-4632  
Description
oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-07  
Published
2010-02-09  
Modified Date
2011-10-25  
Seq
2009-4632  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262121 51749 CVE-2009-4632 http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html  View
262122 51749 CVE-2009-4632 DSA-2000  View
262123 51749 CVE-2009-4632 MDVSA-2011:060  View
262124 51749 CVE-2009-4632 MDVSA-2011:061  View
262125 51749 CVE-2009-4632 MDVSA-2011:088  View
262126 51749 CVE-2009-4632 MDVSA-2011:112  View
262127 51749 CVE-2009-4632 MDVSA-2011:114  View
262128 51749 CVE-2009-4632 36465  View
262129 51749 CVE-2009-4632 USN-931-1  View
262130 51749 CVE-2009-4632 ADV-2010-0935  View
262131 51749 CVE-2009-4632 ADV-2011-1241  View
262132 51749 CVE-2009-4632 https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37865 JVNDB-2010-003650 FFmpeg の oggparsevorbis.c における重要なメモリコンテンツを取得される脆弱性 FFmpeg の oggparsevorbis.c は、特定のポインタ演算を適切に実行しないため、重要なメモリコンテンツを取得される、およびサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-4632 42063 CVE-2009-4632 51749 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003650.html 2010-02-09 2012-06-26 View