Описание
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 24.0.1312.56-0ubuntu1 |
| hardy | DNE | |
| lucid | released | 3.0.1271.97-0ubuntu0.10.04.1 |
| oneiric | released | 3.0.1271.97-0ubuntu0.11.10.1 |
| precise | released | 3.0.1271.97-0ubuntu0.12.04.1 |
| quantal | released | 3.0.1271.97-0ubuntu0.12.10.1 |
| upstream | released | 23.0.1271.97 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | ignored | end of life |
| lucid | not-affected | |
| natty | DNE | |
| oneiric | DNE | |
| precise | DNE | |
| quantal | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | not-affected | |
| natty | DNE | |
| oneiric | DNE | |
| precise | DNE | |
| quantal | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 6:0.8.5-0ubuntu1 |
| hardy | DNE | |
| lucid | DNE | |
| natty | ignored | end of life |
| oneiric | released | 4:0.7.6-0ubuntu0.11.10.3 |
| precise | released | 4:0.8.5-0ubuntu0.12.04.1 |
| quantal | released | 6:0.8.5-0ubuntu0.12.10.1 |
| upstream | released | 0.8.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 6:0.8.5ubuntu1 |
| hardy | DNE | |
| lucid | DNE | |
| natty | ignored | end of life |
| oneiric | released | 4:0.7.6ubuntu0.11.10.3 |
| precise | released | 4:0.8.5ubuntu0.12.04.1 |
| quantal | released | 6:0.8.5ubuntu0.12.10.1 |
| upstream | released | 0.8.5 |
Показывать по
EPSS
10 Critical
CVSS2
Связанные уязвимости
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0. ...
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."
EPSS
10 Critical
CVSS2