CVE-2010-4704

Published: Jan 22, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted .ogg file, related to the vorbis_floor0_decode function. NOTE: this might overlap CVE-2011-0480.

Affected (17)

Products: Ffmpeg: Ffmpeg

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Ffmpeg Ffmpeg	Up to 0.6.1
Ffmpeg Ffmpeg	Version 0.3.1
Ffmpeg Ffmpeg	Version 0.3.2
Ffmpeg Ffmpeg	Version 0.3.3
Ffmpeg Ffmpeg	Version 0.3.4
Ffmpeg Ffmpeg	Version 0.3
Ffmpeg Ffmpeg	Version 0.4.0
Ffmpeg Ffmpeg	Version 0.4.2
Ffmpeg Ffmpeg	Version 0.4.3
Ffmpeg Ffmpeg	Version 0.4.4
Ffmpeg Ffmpeg	Version 0.4.5
Ffmpeg Ffmpeg	Version 0.4.6
Ffmpeg Ffmpeg	Version 0.4.7
Ffmpeg Ffmpeg	Version 0.4.8
Ffmpeg Ffmpeg	Version 0.4.9 pre1
Ffmpeg Ffmpeg	Version 0.5
Ffmpeg Ffmpeg	Version 0.6

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (32)

http://ffmpeg.mplayerhq.hu/

Source: cve@mitre.org

http://git.ffmpeg.org/?p=ffmpeg.git%3Ba=commit%3Bh=3dde66752d59dfdd0f3727efd66e7202b3c75078

Source: cve@mitre.org

http://secunia.com/advisories/43323

Source: cve@mitre.org

http://www.debian.org/security/2011/dsa-2165

Source: cve@mitre.org

http://www.debian.org/security/2011/dsa-2306

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:060

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:061

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:062

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:088

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:089

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:112

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:114

Source: cve@mitre.org

http://www.securityfocus.com/bid/46294

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-1104-1/

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/1241

Source: cve@mitre.org

https://roundup.ffmpeg.org/issue2322

Source: cve@mitre.org

Exploit

http://ffmpeg.mplayerhq.hu/

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.ffmpeg.org/?p=ffmpeg.git%3Ba=commit%3Bh=3dde66752d59dfdd0f3727efd66e7202b3c75078

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43323

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2165

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2306

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:060

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:061

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:062

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:088

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:089

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:112

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:114

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46294

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-1104-1/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/1241

Source: af854a3a-2127-422b-91ae-364da2661108

https://roundup.ffmpeg.org/issue2322

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.