Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-7937

Опубликовано: 22 янв. 2015
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
Версия до 2.4.1 (включая)
Конфигурация 2
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 40.0.2214.85 (включая)

EPSS

Процентиль: 84%
0.02211
Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 11 лет назад

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.

redhat
около 11 лет назад

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.

debian
около 11 лет назад

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before ...

github
больше 3 лет назад

Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.

EPSS

Процентиль: 84%
0.02211
Низкий

7.5 High

CVSS2

Дефекты

CWE-119