Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-4635

EPSS 9.71% · P93
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-4635

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c and (2) utils.c to use inconsistent codec types and identifiers, leading to processing of a video-structure pointer by the mp3 decoder, and a stack-based buffer overflow.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ffmpeg MOV存储器拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。 FFmpeg 0.5版本中存在拒绝服务漏洞。远程攻击者可借助带有不正确命令标签的MOV存储器导致拒绝服务并可能执行任意代码，该存储器可导致mov.c和utils.c使用不一致的编解码器类型和标识符，这将使得mp3解码器处理视频结构指针，并触发基于栈的缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-4635

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-4635

Please Login to view more intelligence information

Same Patch Batch · n/a · 2010-02-10 · 36 CVEs total

CVE-2009-4633Ffmpeg 'vorbis_dec.c' 拒绝服务攻击或代码执行漏洞
CVE-2010-0240Microsoft Windows头MDL碎片远程代码执行漏洞
CVE-2010-0241Microsoft Windows ICMPv6路由信息远程代码执行漏洞
CVE-2010-0242Microsoft Windows TCP/IP栈选择性应答远程拒绝服务漏洞
CVE-2010-0243Microsoft Office OfficeArtSpgr容器指针覆盖缓冲区错误漏洞
CVE-2010-0250Microsoft DirectX DirectShow AVI文件堆缓冲区溢出漏洞
CVE-2010-0252Microsoft Data Analyzer ActiveX控件栈破坏漏洞
CVE-2009-4631Ffmpeg VP3 decoder Off-by-one溢出漏洞
CVE-2009-4632FFmpeg 'oggparsevorbis.c' 指针算法拒绝服务攻击漏洞
CVE-2010-0239Microsoft Windows ICMPv6路由播发缓冲区溢出漏洞
CVE-2009-4634Ffmpeg 多个整数溢出漏洞
CVE-2009-4636Ffmpeg 无限循环拒绝服务漏洞
CVE-2009-4637Ffmpeg 未明拒绝服务攻击漏洞
CVE-2009-4638FFmpeg 未明整数溢出漏洞
CVE-2009-4639Ffmpeg AVI 分路器 拒绝服务攻击漏洞
CVE-2009-4640Ffmpeg‘vorbis_dec.c’拒绝服务和代码执行漏洞
CVE-2010-0394Nanosleep Trac Git插件远程命令注入漏洞
CVE-2010-0564Trendmicro OfficeScan TMUFE缓冲区溢出漏洞
CVE-2010-0030Microsoft PowerPoint LinkedSlideAtom堆溢出漏洞
CVE-2010-0017Microsoft Windows SMB客户端实现竞争条件漏洞

Showing top 20 of 36 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-4635

No comments yet

Leave a comment