CVE-2009-4631

2010-02-1002:30:00

Debian Security Bug Tracker

security-tracker.debian.org

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.017 Low

EPSS

Percentile

87.8%

JSON

Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file that triggers an out-of-bounds read and possibly memory corruption.

OSVersionArchitecturePackageVersionFilename
Debian12allffmpeg< 4:0.5+svn20090706-3ffmpeg_4:0.5+svn20090706-3_all.deb
Debian11allffmpeg< 4:0.5+svn20090706-3ffmpeg_4:0.5+svn20090706-3_all.deb
Debian10allffmpeg< 4:0.5+svn20090706-3ffmpeg_4:0.5+svn20090706-3_all.deb
Debian999allffmpeg< 4:0.5+svn20090706-3ffmpeg_4:0.5+svn20090706-3_all.deb
Debian13allffmpeg< 4:0.5+svn20090706-3ffmpeg_4:0.5+svn20090706-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ffmpeg	< 4:0.5+svn20090706-3	ffmpeg_4:0.5+svn20090706-3_all.deb
Debian	11	all	ffmpeg	< 4:0.5+svn20090706-3	ffmpeg_4:0.5+svn20090706-3_all.deb
Debian	10	all	ffmpeg	< 4:0.5+svn20090706-3	ffmpeg_4:0.5+svn20090706-3_all.deb
Debian	999	all	ffmpeg	< 4:0.5+svn20090706-3	ffmpeg_4:0.5+svn20090706-3_all.deb
Debian	13	all	ffmpeg	< 4:0.5+svn20090706-3	ffmpeg_4:0.5+svn20090706-3_all.deb