CVE-2011-0480 in Chromeinfo

Summary

Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

01/14/2011

Disclosure

01/14/2011

Entries

1: VDB-56070

CPE

ready

CVSS

10.0

EPSS

0.01291

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!