Computer Security
[EN] securityvulns.ru
no-pyccku



Xvid array index overflow
Published:10.08.2007
Source:BUGTRAQ
SecurityVulns ID:8027
Type:client
Level:5/10
Description:Array index overflow in multiple get_intra_block() variants for different Video formats parsing.
CVE:CVE-2007-3329 (Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted (a) Avi, (b) H.263, or (c) MPEG file.)
Original documentdocumentGENTOO, [ GLSA 200708-02 ] Xvid: Array indexing vulnerabilities (10.08.2007)
Discuss:Read or add your comments to this news (0 comments)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru