CVE-2010-4203
Fixed in a distro release EPSS 5%
WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.
Products: google chrome, webmproject libvpx, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvpx | 0.9.1-2 |
| Debian 13 | libvpx | 0.9.1-2 |
| Debian 14 | libvpx | 0.9.1-2 |
| Red Hat Enterprise Linux 6 | libvpx | 0:0.9.0-8.el6_0 |
| Red Hat Enterprise Linux 6 | libvpx-debuginfo | 0:0.9.0-8.el6_0 |
| Red Hat Enterprise Linux 6 | libvpx-devel | 0:0.9.0-8.el6_0 |
| Red Hat Enterprise Linux 6 | libvpx-utils | 0:0.9.0-8.el6_0 |