Vulnerability Details : CVE-2013-0894
Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2013-0894
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
- cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
- cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-0894
0.56%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 75 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-0894
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2013-0894
-
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-0894
-
http://www.ubuntu.com/usn/USN-1790-1
USN-1790-1: Libav vulnerabilities | Ubuntu security noticesThird Party Advisory
-
https://code.google.com/p/chromium/issues/detail?id=168473
168473 - Heap-buffer-overflow in vorbis_floor0_decode - chromium - MonorailIssue Tracking;Patch;Vendor Advisory
-
http://git.chromium.org/gitweb/?p=chromium/deps/ffmpeg.git;a=commit;h=e1e70d9bb9852b7d099379afc95531a632a20ba5
chromium Git repositories - Git at GoogleVendor Advisory
-
http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html
Chrome Releases: Stable Channel UpdateVendor Advisory
-
http://git.videolan.org/?p=ffmpeg.git;a=commit;h=2c16bf2de07c68513072bf3cc96401d2c6291a3e
git.videolan.org Git - ffmpeg.git/commitPatch;Third Party Advisory
-
http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html
openSUSE-SU-2013:0454-1: moderate: chromium: updated to 27.0.1425Mailing List;Third Party Advisory
Jump to