CVE-2009-0385

Description

Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL pointer dereference.

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 11.55% Top 10%

Vendor Advisory debian.org Vendor Advisory ubuntu.com Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory mandriva.com Vendor Advisory redhat.com

Affected: n/a n/a

References

Link	Tags
http://www.vupen.com/english/advisories/2009/0277	third party advisory vdb entry
http://svn.mplayerhq.hu/ffmpeg/trunk/libavformat/4xm.c?r1=16838&r2=16846&pathrev=16846	broken link
http://secunia.com/advisories/34845	third party advisory
http://secunia.com/advisories/33711	third party advisory
http://www.securityfocus.com/bid/33502	third party advisory vdb entry
http://www.debian.org/security/2009/dsa-1781	third party advisory vendor advisory
http://osvdb.org/51643	vdb entry broken link
http://www.ubuntu.com/usn/USN-734-1	third party advisory vendor advisory
http://secunia.com/advisories/34905	third party advisory
http://www.debian.org/security/2009/dsa-1782	third party advisory vendor advisory
http://git.ffmpeg.org/?p=ffmpeg%3Ba=commitdiff%3Bh=72e715fb798f2cb79fd24a6d2eaeafb7c6eeda17
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html	third party advisory vendor advisory
http://secunia.com/advisories/34385	third party advisory
http://security.gentoo.org/glsa/glsa-200903-33.xml	third party advisory vendor advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:297	third party advisory vendor advisory
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html	third party advisory vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48330	third party advisory vdb entry
http://secunia.com/advisories/34296	third party advisory
http://secunia.com/advisories/34712	third party advisory
http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=16846	broken link
http://www.trapkit.de/advisories/TKADV2009-004.txt	third party advisory
http://www.securityfocus.com/archive/1/500514/100/0/threaded	mailing list third party advisory vdb entry

Frequently Asked Questions

What is the severity of CVE-2009-0385?: CVE-2009-0385 has been scored as a critical severity vulnerability.
How to fix CVE-2009-0385?: To fix CVE-2009-0385, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2009-0385 being actively exploited in the wild?: It is possible that CVE-2009-0385 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~12% probability that this vulnerability will be exploited by malicious actors in the next 30 days.