Search for vulnerabilities
Vulnerability details: VCID-3j7m-rmfc-aaan
Vulnerability ID VCID-3j7m-rmfc-aaan
Aliases CVE-2009-4640
Summary Array index error in vorbis_dec.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Vorbis file that triggers an out-of-bounds read.
Status Published
Exploitability 0.5
Weighted Severity 3.9
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-189 Numeric Errors
System Score Found at
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.02095 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03623 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.03795 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.04906 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.04906 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.04906 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
epss 0.04906 https://api.first.org/data/v1/epss?cve=CVE-2009-4640
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2009-4640
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2009-4640
http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4640
http://secunia.com/advisories/36805
http://secunia.com/advisories/38643
http://secunia.com/advisories/39482
https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240
http://www.debian.org/security/2010/dsa-2000
http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
http://www.mandriva.com/security/advisories?name=MDVSA-2011:088
http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
http://www.securityfocus.com/bid/36465
http://www.ubuntu.com/usn/USN-931-1
http://www.vupen.com/english/advisories/2010/0935
http://www.vupen.com/english/advisories/2011/1241
550442 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550442
cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*
CVE-2009-4640 https://nvd.nist.gov/vuln/detail/CVE-2009-4640
GLSA-201310-12 https://security.gentoo.org/glsa/201310-12
USN-931-1 https://usn.ubuntu.com/931-1/
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2009-4640
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.89438
EPSS Score 0.02095
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.