CVE-2009-0475: Medium severity Android Opencore vulnerability
Integer underflow in the Huffman decoding functionality (pvmp3huffmanparsing.cpp) in OpenCORE 2.0 and earlier allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a crafted MP3 file that triggers heap corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0475?
CVE-2009-0475 has a severity rating that indicates it can lead to denial of service and potentially arbitrary code execution.
How do I fix CVE-2009-0475?
To fix CVE-2009-0475, update to a version of OpenCORE that is later than 2.0, as earlier versions are vulnerable.
What systems are affected by CVE-2009-0475?
CVE-2009-0475 affects OpenCORE 2.0 and earlier versions on systems utilizing the affected software.
What type of attack does CVE-2009-0475 facilitate?
CVE-2009-0475 facilitates attacks that can cause denial of service through crafted MP3 files.
Is CVE-2009-0475 capable of allowing remote code execution?
Yes, CVE-2009-0475 can result in arbitrary code execution due to heap corruption from the integer underflow.