CVE-2011-0480
Fixed in a distro release EPSS 3%
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
Products: google chrome_os, google chrome, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ffmpeg | 7:2.4.1-1 |
| Debian 13 | ffmpeg | 7:2.4.1-1 |
| Debian 14 | ffmpeg | 7:2.4.1-1 |
| Debian 6.0 | ffmpeg | 4:0.5.4-1 |