Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-0894

Опубликовано: 02 июн. 2009
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow (aka DShow) frontend and improper handling of the XVID_ERR_MEMORY return code during processing of a crafted movie file. NOTE: some of these details are obtained from third party information.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xvid:xvid:*:*:*:*:*:*:*:*
Версия до 1.2.1 (включая)
cpe:2.3:a:xvid:xvid:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:xvid:xvid:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:xvid:xvid:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:xvid:xvid:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:xvid:xvid:1.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.04313
Низкий

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 16 лет назад

Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow (aka DShow) frontend and improper handling of the XVID_ERR_MEMORY return code during processing of a crafted movie file. NOTE: some of these details are obtained from third party information.

debian
больше 16 лет назад

Heap-based buffer overflow in the decoder_create function in the initi ...

github
больше 3 лет назад

Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow (aka DShow) frontend and improper handling of the XVID_ERR_MEMORY return code during processing of a crafted movie file. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 88%
0.04313
Низкий

10 Critical

CVSS2

Дефекты

CWE-119