CVE-2009-4639: Medium severity FFmpeg FFmpeg vulnerability
Published Feb 10, 2010
·Updated
The avrescalernd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) via a crafted AVI file that triggers a divide-by-zero error.
Affected Software
1 affected component
FFmpeg FFmpeg=0.5
Event History
Feb 10, 2010
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4639?
CVE-2009-4639 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2009-4639?
To fix CVE-2009-4639, upgrade FFmpeg to a version later than 0.5 where the vulnerability has been patched.
3
What can exploit CVE-2009-4639?
CVE-2009-4639 can be exploited through a maliciously crafted AVI file that causes a divide-by-zero error.
4
Which version of FFmpeg is affected by CVE-2009-4639?
FFmpeg version 0.5 is affected by CVE-2009-4639.
5
What type of attack does CVE-2009-4639 facilitate?
CVE-2009-4639 facilitates a denial of service attack by crashing the application processing the malformed AVI file.