CVE-2009-4632: Medium severity FFmpeg FFmpeg vulnerability
oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an out-of-bounds read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4632?
CVE-2009-4632 is classified as a high severity vulnerability due to its potential to allow remote code execution and denial of service.
How do I fix CVE-2009-4632?
Fixing CVE-2009-4632 involves updating FFmpeg to a version later than 0.5, as patches are included in subsequent releases.
What types of attacks exploit CVE-2009-4632?
CVE-2009-4632 can be exploited through specially crafted files that induce out-of-bounds read conditions.
What are the consequences of CVE-2009-4632?
The consequences of CVE-2009-4632 include exposure of sensitive memory contents and potential application crashes.
Which version of FFmpeg is affected by CVE-2009-4632?
FFmpeg version 0.5 is the only version affected by CVE-2009-4632.