CVE-2007-3329

Publicada em 21 jun 2007 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.2%

Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted (a) Avi, (b) H.263, or (c) MPEG file.

Produtos afetados

n/a · n/a

Referências

http://bugs.gentoo.org/show_bug.cgi?id=183145 http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/bitstream/mbcoding.c http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/bitstream/mbcoding.c?r1=1.54&r2=1.55 http://osvdb.org/37728 http://secunia.com/advisories/25711 http://secunia.com/advisories/26353 https://exchange.xforce.ibmcloud.com/vulnerabilities/34949 http://www.gentoo.org/security/en/glsa/glsa-200708-02.xml http://www.securityfocus.com/bid/24561