Heap overflow

2014-06-1110:57:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.9%

JSON

Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.

CPENameOperatorVersion
chromeeq35.0.1916.114
chromeeq35.0.1916.99
chromeeq35.0.1916.57
chromeeq35.0.1916.122
chromeeq35.0.1916.3
chromeeq35.0.1916.38
chromeeq35.0.1916.105
chromeeq35.0.1916.128
chromeeq35.0.1916.95
chromeeq35.0.1916.52

Name	Operator	Version
chrome	eq	35.0.1916.114
chrome	eq	35.0.1916.99
chrome	eq	35.0.1916.57
chrome	eq	35.0.1916.122
chrome	eq	35.0.1916.3
chrome	eq	35.0.1916.38
chrome	eq	35.0.1916.105
chrome	eq	35.0.1916.128
chrome	eq	35.0.1916.95
chrome	eq	35.0.1916.52