Buffer overflow in Google Chrome
CVE-2011-0480
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
Vulnerability class: Buffer Overflow
EPSS: 0.023 (81.6th percentile) — read the EPSS interpretation.
Affected products
- Google Chrome
- Google Chrome_os
- Canonical Ubuntu_linux — versions 8.04, 9.10, 10.04
- Debian Debian_linux — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_CONFIRM, Broken Link)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_MLIST, Broken Link)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
- cve@mitre.org (x_refsource_CONFIRM, Broken Link)
Frequently asked questions
- What is CVE-2011-0480?
- CVE-2011-0480 is a vulnerability in Google Chrome, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). Published 2011-01-14.
- Is CVE-2011-0480 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.