CVE-2009-4634
published 2010-02-10CVE-2009-4634: Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1)…
PriorityP343critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.21%
93.7th percentile
Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec.c and triggers a wraparound of the stack pointer, or (2) access a pointer from out-of-bounds memory in mov.c, related to an elst tag that appears before a tag that creates a stream.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ffmpeg | < ffmpeg 4:0.5+svn20090706-3 (bookworm) | ffmpeg 4:0.5+svn20090706-3 (bookworm) |
| ffmpeg | ffmpeg | — | — |
| ffmpeg | ffmpeg | >= 0 < 4:0.5+svn20090706-3 | 4:0.5+svn20090706-3 |
| ffmpeg | ffmpeg | >= 0 < 4:0.5+svn20090706-3 | 4:0.5+svn20090706-3 |
| ffmpeg | ffmpeg | >= 0 < 4:0.5+svn20090706-3 | 4:0.5+svn20090706-3 |
| ffmpeg | ffmpeg | >= 0 < 4:0.5+svn20090706-3 | 4:0.5+svn20090706-3 |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_debian10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
FFmpeg vulnerabilities
vendor_ubuntu·2010-04-19
CVE-2009-4632 FFmpeg vulnerabilities
Title: FFmpeg vulnerabilities
Summary: FFmpeg vulnerabilities
It was discovered that FFmpeg contained multiple security issues when
handling certain multimedia files. If a user were tricked into opening a
crafted multimedia file, an attacker could cause a denial of service via
application crash, or possibly execute arbitrary code with the privileges
of the user invoking the program.
Instructions: In general, a standard system upgrade is sufficient to effect the
necessary changes.
Debian
CVE-2009-4634: ffmpeg - Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a deni...
vendor_debian·2009·CVSS 10.0
CVE-2009-4634 [CRITICAL] CVE-2009-4634: ffmpeg - Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a deni...
Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec.c and triggers a wraparound of the stack pointer, or (2) access a pointer from out-of-bounds memory in mov.c, related to an elst tag that appears before a tag that creates a stream.
Scope: local
bookworm: resolved (fixed in 4:0.5+svn20090706-3)
bullseye: resolved (fixed in 4:0.5+svn20090706-3)
forky: resolved (fixed in 4:0.5+svn20090706-3)
sid: resolved (fixed in 4:0.5+svn20090706-3)
trixie: resolved (fixed in 4:0.5+svn20090706-3)
GHSA
GHSA-66fh-frph-79g7: Multiple integer underflows in FFmpeg 0
ghsa_unreviewed·2022-05-02
CVE-2009-4634 [HIGH] GHSA-66fh-frph-79g7: Multiple integer underflows in FFmpeg 0
Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec.c and triggers a wraparound of the stack pointer, or (2) access a pointer from out-of-bounds memory in mov.c, related to an elst tag that appears before a tag that creates a stream.
OSV
CVE-2009-4634: Multiple integer underflows in FFmpeg 0
osv·2010-02-10·CVSS 10.0
CVE-2009-4634 [CRITICAL] CVE-2009-4634: Multiple integer underflows in FFmpeg 0
Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec.c and triggers a wraparound of the stack pointer, or (2) access a pointer from out-of-bounds memory in mov.c, related to an elst tag that appears before a tag that creates a stream.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.htmlhttp://secunia.com/advisories/36805http://secunia.com/advisories/38643http://secunia.com/advisories/39482http://www.debian.org/security/2010/dsa-2000http://www.mandriva.com/security/advisories?name=MDVSA-2011:059http://www.mandriva.com/security/advisories?name=MDVSA-2011:060http://www.mandriva.com/security/advisories?name=MDVSA-2011:061http://www.mandriva.com/security/advisories?name=MDVSA-2011:088http://www.mandriva.com/security/advisories?name=MDVSA-2011:112http://www.mandriva.com/security/advisories?name=MDVSA-2011:114http://www.securityfocus.com/bid/36465http://www.ubuntu.com/usn/USN-931-1http://www.vupen.com/english/advisories/2010/0935http://www.vupen.com/english/advisories/2011/1241https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.htmlhttp://secunia.com/advisories/36805http://secunia.com/advisories/38643http://secunia.com/advisories/39482http://www.debian.org/security/2010/dsa-2000http://www.mandriva.com/security/advisories?name=MDVSA-2011:059http://www.mandriva.com/security/advisories?name=MDVSA-2011:060http://www.mandriva.com/security/advisories?name=MDVSA-2011:061http://www.mandriva.com/security/advisories?name=MDVSA-2011:088http://www.mandriva.com/security/advisories?name=MDVSA-2011:112http://www.mandriva.com/security/advisories?name=MDVSA-2011:114http://www.securityfocus.com/bid/36465http://www.ubuntu.com/usn/USN-931-1http://www.vupen.com/english/advisories/2010/0935http://www.vupen.com/english/advisories/2011/1241https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240
2010-02-10
Published