Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-0385
HistoryFeb 02, 2009 - 12:00 a.m.

CVE-2009-0385

2009-02-0200:00:00
ubuntu.com
ubuntu.com
11

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.495 Medium

EPSS

Percentile

97.5%

JSON

Integer signedness error in the fourxm_read_header function in
libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers
to execute arbitrary code via a malformed 4X movie file with a large
current_track value, which triggers a NULL pointer dereference.

Bugs

Notes

Author Note
mdeslaur kino is built with --disable-local-ffmpeg, so it’s not vulnerable
OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchffmpeg<Β 3:0.cvs20070307-5ubuntu4.2UNKNOWN
ubuntu8.04noarchffmpeg<Β 3:0.cvs20070307-5ubuntu7.2UNKNOWN
ubuntu8.10noarchffmpeg-debian<Β 3:0.svn20080206-12ubuntu3.1UNKNOWN
ubuntu8.04noarchmplayer<Β 2:1.0~rc2-0ubuntu13.2UNKNOWN

Related

prion 2
debiancve 2
nessus 12
openvas 29
slackware 1
seebug 1
checkpoint_advisories 1
cve 2
freebsd 2
osv 2
debian 2
fedora 2
ubuntucve 1
ubuntu 1
gentoo 1
ibm 1
prion
prion
Integer overflow
2009-02-02 19:30:00
Integer overflow
2009-02-23 15:30:00
debiancve
debiancve
CVE-2009-0385
2009-02-02 19:30:00
CVE-2009-0698
2009-02-23 15:30:00
nessus
nessus
Slackware 12.0 / 12.1 / 12.2 / current : xine-lib (SSA:2009-098-03)
2009-04-08 00:00:00
FreeBSD : ffmpeg -- 4xm processing memory corruption vulnerability (6733e1bf-125f-11de-a964-0030843d3802)
2009-03-17 00:00:00
Fedora 9 : xine-lib-1.1.16.3-1.fc9 (2009-3428)
2009-04-10 00:00:00
openvas
openvas
FreeBSD Ports: ffmpeg
2009-03-20 00:00:00
Slackware Advisory SSA:2009-098-03 xine-lib
2012-09-11 00:00:00
Slackware Advisory SSA:2009-098-03 xine-lib
2012-09-11 00:00:00
slackware
slackware
xine-lib
2009-04-07 23:31:21
seebug
seebug
FFmpeg 4xmζ–‡δ»Άθ§£ζžε†…ε­˜η ΄εζΌζ΄ž
2009-02-19 00:00:00
checkpoint_advisories
checkpoint_advisories
FFmpeg 4xm Processing Memory Corruption (CVE-2009-0385)
2009-11-03 00:00:00
cve
cve
CVE-2009-0385
2009-02-02 19:30:00
CVE-2009-0698
2009-02-23 15:30:00
freebsd
freebsd
ffmpeg -- 4xm processing memory corruption vulnerability
2009-01-28 00:00:00
libxine -- multiple vulnerabilities
2009-04-04 00:00:00
osv
osv
ffmpeg ffmpeg-debian - arbitrary code execution
2009-04-29 00:00:00
mplayer - arbitrary code execution
2009-04-29 00:00:00
debian
debian
[SECURITY] [DSA 1781-1] New ffmpeg-debian packages fix arbitrary code execution
2009-04-29 07:00:35
[SECURITY] [DSA 1782-1] New mplayer packages fix arbitrary code execution
2009-04-29 07:01:08
fedora
fedora
[SECURITY] Fedora 10 Update: xine-lib-1.1.16.3-1.fc10
2009-04-09 16:08:28
[SECURITY] Fedora 9 Update: xine-lib-1.1.16.3-1.fc9
2009-04-09 16:07:39
ubuntucve
ubuntucve
CVE-2009-0698
2009-02-23 00:00:00
ubuntu
ubuntu
FFmpeg vulnerabilities
2009-03-16 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2009-03-19 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities Have Been Identified In IBM Security Verify Privilege Vault previously known as IBM Security Secret Server
2020-09-23 05:03:22

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.495 Medium

EPSS

Percentile

97.5%

JSON
Related for UB:CVE-2009-0385
prion2debiancve2nessus12openvas29slackware1seebug1checkpoint_advisories1cve2freebsd2osv2debian2fedora2ubuntucve1ubuntu1gentoo1ibm1