Description
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://roundup.ffmpeg.org/issue2548 ↗
- http://www.debian.org/security/2011/dsa-2306 ↗
- http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html ↗
- http://article.gmane.org/gmane.comp.video.ffmpeg.devel/122703 ↗
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=610550 ↗
- http://codereview.chromium.org/6069005 ↗
- http://www.securityfocus.com/bid/45788 ↗
- http://git.ffmpeg.org/?p=ffmpeg.git%3Ba=commit%3Bh=13184036a6b1b1d4b61c91118c0896e9ad4634c3 ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 ↗
- http://src.chromium.org/viewvc/chrome?view=rev&revision=70200 ↗
- http://codereview.chromium.org/5964011 ↗
- http://www.srware.net/forum/viewtopic.php?f=18&t=2054 ↗
- http://www.ubuntu.com/usn/usn-1104-1/ ↗
- http://osvdb.org/70463 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64671 ↗
- http://ffmpeg.mplayerhq.hu/ ↗
- http://code.google.com/p/chromium/issues/detail?id=68115 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14380 ↗
- http://roundup.ffmpeg.org/issue2550 ↗
- http://secunia.com/advisories/42951 ↗