Search for vulnerabilities
Vulnerability details: VCID-nh4y-5e4e-aaar
Vulnerability ID VCID-nh4y-5e4e-aaar
Aliases CVE-2009-4639
Summary The av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) via a crafted AVI file that triggers a divide-by-zero error.
Status Published
Exploitability 0.5
Weighted Severity 3.9
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-189 Numeric Errors
System Score Found at
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.01038 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.03412 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04116 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
epss 0.04688 https://api.first.org/data/v1/epss?cve=CVE-2009-4639
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2009-4639
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2009-4639
http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4639
http://secunia.com/advisories/36805
http://secunia.com/advisories/39482
https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240
https://roundup.ffmpeg.org/roundup/ffmpeg/issue1245
http://www.mandriva.com/security/advisories?name=MDVSA-2011:059
http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
http://www.mandriva.com/security/advisories?name=MDVSA-2011:088
http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
http://www.securityfocus.com/bid/36465
http://www.ubuntu.com/usn/USN-931-1
http://www.vupen.com/english/advisories/2010/0935
http://www.vupen.com/english/advisories/2011/1241
550442 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550442
cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*
CVE-2009-4639 https://nvd.nist.gov/vuln/detail/CVE-2009-4639
GLSA-201310-12 https://security.gentoo.org/glsa/201310-12
USN-931-1 https://usn.ubuntu.com/931-1/
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2009-4639
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.84365
EPSS Score 0.01038
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.