NetSight
IP …
medium4.3

CVE-2010-4704

libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafte…

Impact

libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted .ogg file, related to the vorbis_floor0_decode function. NOTE: this might overlap CVE-2011-0480.

Affected products

VendorProductAffected versions
FfmpegFfmpeg
through 0.6.1
Versions 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4

Weakness classification

CWE-20

References