Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-4633

EPSS 6.79% · P91
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-4633

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that modifies a loop counter and triggers a heap-based buffer overflow.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ffmpeg 'vorbis_dec.c' 拒绝服务攻击或代码执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。 Ffmpeg vorbis_dec.c中当制作一个比较运算符，使用一个分配操作，允许远程攻击者引发拒绝服务攻击或执行任意代码利用一个制作的循环计数器同时引起堆栈溢出漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-4633

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-4633

Please Login to view more intelligence information

Same Patch Batch · n/a · 2010-02-10 · 36 CVEs total

CVE-2009-4634Ffmpeg 多个整数溢出漏洞
CVE-2010-0240Microsoft Windows头MDL碎片远程代码执行漏洞
CVE-2010-0241Microsoft Windows ICMPv6路由信息远程代码执行漏洞
CVE-2010-0242Microsoft Windows TCP/IP栈选择性应答远程拒绝服务漏洞
CVE-2010-0243Microsoft Office OfficeArtSpgr容器指针覆盖缓冲区错误漏洞
CVE-2010-0250Microsoft DirectX DirectShow AVI文件堆缓冲区溢出漏洞
CVE-2010-0252Microsoft Data Analyzer ActiveX控件栈破坏漏洞
CVE-2009-4631Ffmpeg VP3 decoder Off-by-one溢出漏洞
CVE-2009-4632FFmpeg 'oggparsevorbis.c' 指针算法拒绝服务攻击漏洞
CVE-2010-0239Microsoft Windows ICMPv6路由播发缓冲区溢出漏洞
CVE-2009-4635Ffmpeg MOV存储器拒绝服务漏洞
CVE-2009-4636Ffmpeg 无限循环拒绝服务漏洞
CVE-2009-4637Ffmpeg 未明拒绝服务攻击漏洞
CVE-2009-4638FFmpeg 未明整数溢出漏洞
CVE-2009-4639Ffmpeg AVI 分路器 拒绝服务攻击漏洞
CVE-2009-4640Ffmpeg‘vorbis_dec.c’拒绝服务和代码执行漏洞
CVE-2010-0394Nanosleep Trac Git插件远程命令注入漏洞
CVE-2010-0564Trendmicro OfficeScan TMUFE缓冲区溢出漏洞
CVE-2010-0030Microsoft PowerPoint LinkedSlideAtom堆溢出漏洞
CVE-2010-0017Microsoft Windows SMB客户端实现竞争条件漏洞

Showing top 20 of 36 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-4633

No comments yet

Leave a comment