NVD

Id
51751  
Name
CVE-2009-4634  
Description
Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec.c and triggers a wraparound of the stack pointer, or (2) access a pointer from out-of-bounds memory in mov.c, related to an elst tag that appears before a tag that creates a stream.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-02-09  
Modified Date
2011-10-25  
Seq
2009-4634  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262145 51751 CVE-2009-4634 http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html  View
262146 51751 CVE-2009-4634 DSA-2000  View
262147 51751 CVE-2009-4634 MDVSA-2011:059  View
262148 51751 CVE-2009-4634 MDVSA-2011:060  View
262149 51751 CVE-2009-4634 MDVSA-2011:061  View
262150 51751 CVE-2009-4634 MDVSA-2011:088  View
262151 51751 CVE-2009-4634 MDVSA-2011:112  View
262152 51751 CVE-2009-4634 MDVSA-2011:114  View
262153 51751 CVE-2009-4634 36465  View
262154 51751 CVE-2009-4634 USN-931-1  View
262155 51751 CVE-2009-4634 ADV-2010-0935  View
262156 51751 CVE-2009-4634 ADV-2011-1241  View
262157 51751 CVE-2009-4634 https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37867 JVNDB-2010-003652 FFmpeg における整数アンダーフローの脆弱性 FFmpeg ストリームを生成するタグの前に表示される elst タグの処理に不備があるため、整数アンダーフローの脆弱性が存在します。 CVE-2009-4634 42065 CVE-2009-4634 51751 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003652.html 2010-02-09 2012-06-26 View