CVE-2010-4203
libvpx: memory corruption flaw
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Red Hat (moyenne), Oracle (moyenne).
Description
WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| debian 11 | libvpx | 0.9.1-2 |
| debian 12 | libvpx | 0.9.1-2 |
| debian 13 | libvpx | 0.9.1-2 |
| debian 14 | libvpx | 0.9.1-2 |
| echo | libvpx | 0.9.1-2 |
| Oracle Linux 6 | libvpx, libvpx-devel, libvpx-utils | 0.9.0-8.el6_0 |
Afficher les 8 entrées de 6 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| debian 11 | libvpx | 0.9.1-2 |
| debian 12 | libvpx | 0.9.1-2 |
| debian 13 | libvpx | 0.9.1-2 |
| debian 14 | libvpx | 0.9.1-2 |
| echo | libvpx | 0.9.1-2 |
| Oracle Linux 6 | libvpx | 0.9.0-8.el6_0 |
| Oracle Linux 6 | libvpx-devel | 0.9.0-8.el6_0 |
| Oracle Linux 6 | libvpx-utils | 0.9.0-8.el6_0 |
Références
- http://code.google.com/p/chromium/issues/detail?id=60055
- http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
- http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=blob%3Bf=CHANGELOG
- http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=commit%3Bh=09bcc1f710ea65dc158639479288fb1908ff0c53
- http://secunia.com/advisories/42109
- http://secunia.com/advisories/42118
- http://secunia.com/advisories/42690
- http://secunia.com/advisories/42908
Les 17 références
- http://security.gentoo.org/glsa/glsa-201101-03.xml
- http://www.vupen.com/english/advisories/2011/0115
- https://access.redhat.com/security/cve/CVE-2010-4203
- https://linux.oracle.com/cve/CVE-2010-4203.html
- https://linux.oracle.com/errata/ELSA-2010-0999.html
- https://nvd.nist.gov/vuln/detail/CVE-2010-4203
- https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:12198
- https://rhn.redhat.com/errata/RHSA-2010-0999.html
- https://www.cve.org/CVERecord?id=CVE-2010-4203