Lucene search
Ubuntu.comUB:CVE-2010-4705HistoryJan 22, 2011 - 12:00 a.m.
CVE-2010-4705
2011-01-2200:00:00
ubuntu.com
ubuntu.com
7
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
63.8%
Integer overflow in the vorbis_residue_decode_internal function in
libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has
unspecified impact and remote attack vectors, related to the sizes of
certain integer data types. NOTE: this might overlap CVE-2011-0480.
Bugs
- <https://roundup.ffmpeg.org/issue2322>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611495>
Notes
| Author | Note |
|---|---|
| mdeslaur | 0.5.x and 0.6.x don’t have affected code |
Related
prion
prion
Integer overflow
2011-01-22 22:00:00
Buffer overflow
2011-01-14 17:00:00
Design/Logic Flaw
2011-01-22 22:00:00
cve
cve
debiancve
debiancve
ubuntucve
ubuntucve
CVE-2011-0480
2011-01-14 00:00:00
CVE-2010-4704
2011-01-22 00:00:00
nessus
nessus
Debian DSA-2165-1 : ffmpeg-debian - buffer overflow
2011-02-20 00:00:00
Debian DSA-2306-1 : ffmpeg - several vulnerabilities
2011-09-12 00:00:00
securityvulns
securityvulns
FFmpeg libavcodec / MPlayer buffer overflow
2010-09-29 00:00:00
GGmpeg library multiple security vulnerabilities
2011-04-05 00:00:00
[USN-1104-1] FFmpeg vulnerabilities
2011-04-05 00:00:00
osv
osv
ffmpeg-debian - buffer overflow
2011-02-16 00:00:00
ffmpeg - several
2011-09-11 00:00:00
openvas
openvas
Debian Security Advisory DSA 2165-1 (ffmpeg-debian)
2011-03-07 00:00:00
Debian: Security Advisory (DSA-2165-1)
2011-03-07 00:00:00
Debian Security Advisory DSA 2306-1 (ffmpeg)
2011-09-21 00:00:00
debian
debian
[SECURITY] [DSA 2165-1] ffmpeg-debian security update
2011-02-16 14:05:37
[SECURITY] [DSA 2165-1] ffmpeg-debian security update
2011-02-16 14:05:37
[SECURITY] [DSA 2306-1] ffmpeg security update
2011-09-11 17:17:22
ubuntu
ubuntu
FFmpeg vulnerabilities
2011-04-04 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2013-10-25 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
63.8%
Related for UB:CVE-2010-4705