Computer Security
[EN] securityvulns.ru no-pyccku


Xvid array index overflow
Published:10.08.2007
Source:
SecurityVulns ID:8027
Type:client
Threat Level:
5/10
Description:Array index overflow in multiple get_intra_block() variants for different Video formats parsing.
CVE:CVE-2007-3329 (Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted (a) Avi, (b) H.263, or (c) MPEG file.)
Original documentdocumentGENTOO, [ GLSA 200708-02 ] Xvid: Array indexing vulnerabilities (10.08.2007)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod