← Back

CVE-2013-0894

nvd nist
Published: Feb 23, 2013Modified: Apr 29, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.

Affected (7)

Products: Google: Chrome · Ffmpeg: Ffmpeg · Opensuse: Opensuse · +1 more
Show all products
Google: Chrome · Ffmpeg: Ffmpeg · Opensuse: Opensuse · Canonical: Ubuntu Linux
Google
1 product
Chrome
Ffmpeg
1 product
Ffmpeg
Opensuse
1 product
Opensuse
Canonical
1 product
Ubuntu Linux
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 25.0.1364.99
Running on/withPlatform Versions
Apple
Macos
All versions
Configuration B
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 25.0.1364.97
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Ffmpeg
Up to 1.1.3
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Opensuse
Version 12.1
Opensuse
Version 12.2
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 12.10

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (12)

Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.