CVE-2011-0480
14.01.2011, 17:00
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
| Vendor | Product | Version |
|---|---|---|
| chrome_os | 𝑥 < 8.0.552.344 | |
| chrome | 𝑥 < 8.0.552.237 | |
| debian | debian_linux | 6.0 |
| canonical | ubuntu_linux | 8.04 |
| canonical | ubuntu_linux | 9.10 |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 10.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||
| ffmpeg |
| ||||||||||
| libav |
|
References