CVE-2013-0899

 

Published at: - 23-02-2013 10:55

Last modified: - 24-01-2023 03:48

Total changes: - 9

Description

Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:N/A:P

 

Verification logic

 

Reference

• https://codereview.chromium.org/11575026
• https://src.chromium.org/viewvc/chrome?view=rev&revision=173498
• https://src.chromium.org/viewvc/chrome/trunk/deps/third_party/opus/src/opus_decoder.c?r1=173498&r2=173497&pathrev=173498
• http://opus-codec.org/downloads/
• http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html
• https://code.google.com/p/chromium/issues/detail?id=160480
• openSUSE-SU-2013:0454-Mailing List, Third Party Advisory
• oval:org.mitre.oval:def:16027-Broken Link, Third Party Advisory

 

Keywords

NVD

 

CVE-2013-0899

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures