4.3
CVSSv2

CVE-2010-4704

Published: 22/01/2011 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and previous versions allows remote malicious users to cause a denial of service (application crash) via a crafted .ogg file, related to the vorbis_floor0_decode function. NOTE: this might overlap CVE-2011-0480.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ffmpeg ffmpeg 0.4.5

ffmpeg ffmpeg 0.3.2

ffmpeg ffmpeg 0.4.7

ffmpeg ffmpeg 0.3.3

ffmpeg ffmpeg 0.3

ffmpeg ffmpeg 0.4.2

ffmpeg ffmpeg 0.5

ffmpeg ffmpeg

ffmpeg ffmpeg 0.3.1

ffmpeg ffmpeg 0.4.9

ffmpeg ffmpeg 0.6

ffmpeg ffmpeg 0.4.4

ffmpeg ffmpeg 0.4.6

ffmpeg ffmpeg 0.3.4

ffmpeg ffmpeg 0.4.0

ffmpeg ffmpeg 0.4.8

ffmpeg ffmpeg 0.4.3

Vendor Advisories

FFmpeg could be made to run programs as your login if it opened a specially crafted file ...
Debian Bug report logs - #611495 [CVE-2010-4705] [CVE-2010-4704] integer overflow in Vorbis decoder Package: ffmpeg; Maintainer for ffmpeg is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for ffmpeg is src:ffmpeg (PTS, buildd, popcon) Reported by: Luciano Bello <luciano@debianorg> Date: ...
Debian Bug report logs - #628448 several vulnerabilities: CVE-2011-2162 CVE-2011-2161 CVE-2011-2160 Package: libav; Maintainer for libav is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Steffen Joeris <white@debianorg> Date: Sun, 29 May 2011 03:27:01 UTC Severity: g ...
Several vulnerabilities have been discovered in FFmpeg coders, which are used by MPlayer and other applications CVE-2010-3429 Cesar Bernardini and Felipe Andres Manzano reported an arbitrary offset dereference vulnerability in the libavcodec, in particular in the FLIC file format parser A specific FLIC file may exploit this vulnerability a ...