Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-4201
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-4201

Description:
Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MPEG-4 (MP4) file.

CVE Status:
Candidate

References:

SAID
  Secunia Advisory: SA32661
  Secunia Advisory: SA32006

OSVDB
  48349

MLIST
  http://www.openwall.com/lists/oss-security/2008/09/24/6

MISC
  http://bugs.gentoo.org/attachment.cgi?id=166174&action=view

GENTOO
  http://security.gentoo.org/glsa/glsa-200811-03.xml

CONFIRM
  http://bugs.gentoo.org/show_bug.cgi?id=238445
  http://www.audiocoding.com/archive.html
  http://www.audiocoding.com/patch/main_overflow.diff
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499899

BID
  31219


Return to the previous page.