Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-0893

EPSS 9.30% · P93
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0893

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a "missing resync marker range check" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
xvidcore library安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
xvidcore library是一个应用软件。由开源社区构建的 MPEG4 视频编解码器。 在某些情况下，视频流可以直接提供macroblock编号，该编号是解码视频时所使用的大数据结构的索引。在将macroblock编号储存到文件中时，变量位长度字段尝试使用尽可能少的位来表示这个编号。这种设计充分的限制了文件可以索引的最大macroblock，但仍不能提供足够的保护。攻击者可以选择文件的其他方面，指定macroblock编号修改所预期数据结构边界之外的内存，最终导致可控的破坏堆上的数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-0893

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0893

Please Login to view more intelligence information

Same Patch Batch · n/a · 2009-06-02 · 16 CVEs total

CVE-2009-0185Apple QuickTime Player 解码"MS ADPCM" 堆缓冲区溢出漏洞
CVE-2009-0188Apple QuickTime Player 视频文件"Sorenson 3" 内存破坏漏洞
CVE-2009-0894Xvid视频解码器DirectShow初始化逻辑堆溢出漏洞
CVE-2009-0950Apple iTunes多个URI处理器栈溢出漏洞
CVE-2009-0951Apple QuickTime Player 文件"FLC" 堆缓冲区溢出漏洞
CVE-2009-0952Apple QuickTime Player 图片"PSD" 缓冲区溢出漏洞
CVE-2009-0953Apple QuickTime Player 图片"PICT" 堆缓冲区溢出漏洞
CVE-2009-0954Apple QuickTime Player "CRGN原子类型" 堆缓冲区溢出漏洞
CVE-2009-0955Apple QuickTime Player 视频文件"Apple" 堆缓冲区溢出漏洞
CVE-2009-0956Apple QuickTime Player 视频文件"用户数据原子" 内存错误漏洞
CVE-2009-0957Apple QuickTime Player 图片"JP2" 堆缓冲区溢出漏洞
CVE-2009-1880MT312 REP-BBS 多个跨站脚本攻击漏洞
CVE-2009-1881MT312 IMG-BBS "model.php" 跨站脚本攻击漏洞
CVE-2009-1882ImageMagick TIFF文件解析整数溢出漏洞
CVE-2004-2764Sun Java Runtime Environment Remote XSLT特权升级漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-0893

No comments yet

Leave a comment