NVD

Id
7542  
Name
CVE-2011-0480  
Description
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-01-14  
Modified Date
2012-01-26  
Seq
2011-0480  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42545 7542 CVE-2011-0480 [ffmpeg-devel] 20101229 [PATCH] Fix a couple of errors with bad Vorbis headers  View
42546 7542 CVE-2011-0480 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610550  View
42547 7542 CVE-2011-0480 http://code.google.com/p/chromium/issues/detail?id=68115  View
42548 7542 CVE-2011-0480 http://codereview.chromium.org/5964011  View
42549 7542 CVE-2011-0480 http://codereview.chromium.org/6069005  View
42550 7542 CVE-2011-0480 http://ffmpeg.mplayerhq.hu/  View
42551 7542 CVE-2011-0480 http://git.ffmpeg.org/?p=ffmpeg.git;a=commit;h=13184036a6b1b1d4b61c91118c0896e9ad4634c3  View
42552 7542 CVE-2011-0480 http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html  View
42553 7542 CVE-2011-0480 oval:org.mitre.oval:def:14380  View
42554 7542 CVE-2011-0480 http://roundup.ffmpeg.org/issue2548  View
42555 7542 CVE-2011-0480 http://roundup.ffmpeg.org/issue2550  View
42556 7542 CVE-2011-0480 http://src.chromium.org/viewvc/chrome?view=rev&revision=70200  View
42557 7542 CVE-2011-0480 DSA-2306  View
42558 7542 CVE-2011-0480 MDVSA-2011:061  View
42559 7542 CVE-2011-0480 45788  View
42560 7542 CVE-2011-0480 http://www.srware.net/forum/viewtopic.php?f=18&t=2054  View
42561 7542 CVE-2011-0480 USN-1104-1  View
42562 7542 CVE-2011-0480 chrome-vorbis-bo(64671)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32583 JVNDB-2011-002823 Google Chrome および Chrome OS で利用される vorbis_dec.c におけるバッファオーバーフローの脆弱性 Google Chrome および Chrome OS で利用される FFmpeg の Vorbis デコーダ 内の vorbis_dec.c には、バッファオーバーフローの脆弱性が存在します。 CVE-2011-0480 48387 CVE-2011-0480 7542 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002823.html 2011-01-12 2011-11-15 View