CVE-2010-4203
libvpx: memory corruption flaw
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (media), Oracle (media).
Descripción
WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | libvpx | 0.9.1-2 |
| debian 12 | libvpx | 0.9.1-2 |
| debian 13 | libvpx | 0.9.1-2 |
| debian 14 | libvpx | 0.9.1-2 |
| echo | libvpx | 0.9.1-2 |
| Oracle Linux 6 | libvpx, libvpx-devel, libvpx-utils | 0.9.0-8.el6_0 |
Mostrar las 8 entradas de 6 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | libvpx | 0.9.1-2 |
| debian 12 | libvpx | 0.9.1-2 |
| debian 13 | libvpx | 0.9.1-2 |
| debian 14 | libvpx | 0.9.1-2 |
| echo | libvpx | 0.9.1-2 |
| Oracle Linux 6 | libvpx | 0.9.0-8.el6_0 |
| Oracle Linux 6 | libvpx-devel | 0.9.0-8.el6_0 |
| Oracle Linux 6 | libvpx-utils | 0.9.0-8.el6_0 |
Referencias
- http://code.google.com/p/chromium/issues/detail?id=60055
- http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
- http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=blob%3Bf=CHANGELOG
- http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=commit%3Bh=09bcc1f710ea65dc158639479288fb1908ff0c53
- http://secunia.com/advisories/42109
- http://secunia.com/advisories/42118
- http://secunia.com/advisories/42690
- http://secunia.com/advisories/42908
Las 17 referencias
- http://security.gentoo.org/glsa/glsa-201101-03.xml
- http://www.vupen.com/english/advisories/2011/0115
- https://access.redhat.com/security/cve/CVE-2010-4203
- https://linux.oracle.com/cve/CVE-2010-4203.html
- https://linux.oracle.com/errata/ELSA-2010-0999.html
- https://nvd.nist.gov/vuln/detail/CVE-2010-4203
- https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:12198
- https://rhn.redhat.com/errata/RHSA-2010-0999.html
- https://www.cve.org/CVERecord?id=CVE-2010-4203