Lucene search

K
cve[email protected]CVE-2010-4705
HistoryJan 22, 2011 - 10:00 p.m.

CVE-2010-4705

2011-01-2222:00:04
CWE-189
web.nvd.nist.gov
32
cve-2010-4705
integer overflow
vorbis decoder
ffmpeg
remote attack vectors
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.4 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

Integer overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480.

Affected configurations

NVD
Node
ffmpegffmpegMatch0.6
CPENameOperatorVersion
ffmpeg:ffmpegffmpegeq0.6

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.4 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%