WebM libvpx Unspecified Memory Corruption Vulnerability

Bugtraq ID:	44771
Class:	Boundary Condition Error
CVE:	CVE-2010-4203
Remote:	Yes
Local:	No
Published:	Nov 04 2010 12:00AM
Updated:	Apr 13 2015 09:29PM
Credit:	Christoph Diehl.
Vulnerable:	WebM libvpx 0 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Google Chrome 6.0.472 55 Google Chrome 7.0.517.41 Google Chrome 6.0.472.9 Google Chrome 6.0.472.8 Google Chrome 6.0.472.7 Google Chrome 6.0.472.62 Google Chrome 6.0.472.61 Google Chrome 6.0.472.60 Google Chrome 6.0.472.6 Google Chrome 6.0.472.59 Google Chrome 6.0.472.58 Google Chrome 6.0.472.57 Google Chrome 6.0.472.56 Google Chrome 6.0.472.54 Google Chrome 6.0.472.53 Google Chrome 6.0.472.52 Google Chrome 6.0.472.51 Google Chrome 6.0.472.50 Google Chrome 6.0.472.5 Google Chrome 6.0.472.49 Google Chrome 6.0.472.48 Google Chrome 6.0.472.47 Google Chrome 6.0.472.46 Google Chrome 6.0.472.45 Google Chrome 6.0.472.44 Google Chrome 6.0.472.43 Google Chrome 6.0.472.42 Google Chrome 6.0.472.41 Google Chrome 6.0.472.40 Google Chrome 6.0.472.4 Google Chrome 6.0.472.39 Google Chrome 6.0.472.38 Google Chrome 6.0.472.37 Google Chrome 6.0.472.36 Google Chrome 6.0.472.35 Google Chrome 6.0.472.34 Google Chrome 6.0.472.33 Google Chrome 6.0.472.32 Google Chrome 6.0.472.31 Google Chrome 6.0.472.30 Google Chrome 6.0.472.3 Google Chrome 6.0.472.29 Google Chrome 6.0.472.28 Google Chrome 6.0.472.27 Google Chrome 6.0.472.26 Google Chrome 6.0.472.25 Google Chrome 6.0.472.24 Google Chrome 6.0.472.23 Google Chrome 6.0.472.22 Google Chrome 6.0.472.21 Google Chrome 6.0.472.20 Google Chrome 6.0.472.2 Google Chrome 6.0.472.19 Google Chrome 6.0.472.18 Google Chrome 6.0.472.17 Google Chrome 6.0.472.16 Google Chrome 6.0.472.15 Google Chrome 6.0.472.14 Google Chrome 6.0.472.13 Google Chrome 6.0.472.12 Google Chrome 6.0.472.11 Google Chrome 6.0.472.10 Google Chrome 6.0.472.1 Google Chrome 6.0.472.0 Google Chrome 6.0.471.0 Google Chrome 6.0.470.0 Google Chrome 6.0.469.0 Google Chrome 6.0.467.0 Google Chrome 6.0.466.6 Google Chrome 6.0.466.5 Google Chrome 6.0.466.4 Google Chrome 6.0.466.3 Google Chrome 6.0.466.2 Google Chrome 6.0.466.1 Google Chrome 6.0.466.0 Google Chrome 6.0.465.2 Google Chrome 6.0.465.1 Google Chrome 6.0.464.1 Google Chrome 6.0.462.0 Google Chrome 6.0.461.0 Google Chrome 6.0.460.0 Google Chrome 6.0.459.0 Google Chrome 6.0.458.2 Google Chrome 6.0.458.1 Google Chrome 6.0.458.0 Google Chrome 6.0.457.0 Google Chrome 6.0.456.0 Google Chrome 6.0.455.0 Google Chrome 6.0.454.0 Google Chrome 6.0.453.1 Google Chrome 6.0.453.0 Google Chrome 6.0.452.1 Google Chrome 6.0.452.0 Google Chrome 6.0.451.0 Google Chrome 6.0.450.4 Google Chrome 6.0.450.3 Google Chrome 6.0.450.2 Google Chrome 6.0.450.1 Google Chrome 6.0.450.0 Google Chrome 6.0.449.0 Google Chrome 6.0.447.2 Google Chrome 6.0.447.1 Google Chrome 6.0.447.0 Google Chrome 6.0.446.0 Google Chrome 6.0.445.1 Google Chrome 6.0.445.0 Google Chrome 6.0.444.0 Google Chrome 6.0.443.0 Google Chrome 6.0.441.0 Google Chrome 6.0.440.0 Google Chrome 6.0.438.0 Google Chrome 6.0.437.3 Google Chrome 6.0.437.2 Google Chrome 6.0.437.1 Google Chrome 6.0.437.0 Google Chrome 6.0.436.0 Google Chrome 6.0.435.0 Google Chrome 6.0.434.0 Google Chrome 6.0.433.0 Google Chrome 6.0.432.0 Google Chrome 6.0.431.0 Google Chrome 6.0.430.0 Google Chrome 6.0.428.0 Google Chrome 6.0.427.0 Google Chrome 6.0.426.0 Google Chrome 6.0.425.0 Google Chrome 6.0.424.0 Google Chrome 6.0.423.0 Google Chrome 6.0.422.0 Google Chrome 6.0.421.0 Google Chrome 6.0.419.0 Google Chrome 6.0.418.9 Google Chrome 6.0.418.8 Google Chrome 6.0.418.7 Google Chrome 6.0.418.6 Google Chrome 6.0.418.5 Google Chrome 6.0.418.4 Google Chrome 6.0.418.3 Google Chrome 6.0.418.2 Google Chrome 6.0.418.1 Google Chrome 6.0.418.0 Google Chrome 6.0.417.0 Google Chrome 6.0.416.1 Google Chrome 6.0.416.0 Google Chrome 6.0.415.1 Google Chrome 6.0.415.0 Google Chrome 6.0.414.0 Google Chrome 6.0.413.0 Google Chrome 6.0.412.0 Google Chrome 6.0.411.0 Google Chrome 6.0.410.0 Google Chrome 6.0.409.0 Google Chrome 6.0.408.9 Google Chrome 6.0.408.8 Google Chrome 6.0.408.7 Google Chrome 6.0.408.6 Google Chrome 6.0.408.5 Google Chrome 6.0.408.4 Google Chrome 6.0.408.3 Google Chrome 6.0.408.2 Google Chrome 6.0.408.10 Google Chrome 6.0.408.1 Google Chrome 6.0.408.0 Google Chrome 6.0.407.0 Google Chrome 6.0.406.0 Google Chrome 6.0.405.0 Google Chrome 6.0.404.2 Google Chrome 6.0.404.1 Google Chrome 6.0.404.0 Google Chrome 6.0.403.0 Google Chrome 6.0.401.1 Google Chrome 6.0.401.0 Google Chrome 6.0.400.0 Google Chrome 6.0.399.0 Google Chrome 6.0.398.0 Google Chrome 6.0.397.0 Gentoo Linux
Not Vulnerable:	Google Chrome 7.0.517.44

WebM libvpx Unspecified Memory Corruption Vulnerability

WebM libvpx is prone to a memory-corruption vulnerability.

Successful exploits will allow attackers to execute arbitrary code in the context of the application using the affected library. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This issue was previously discussed in BID 44646 (Google Chrome prior to 7.0.517.44 Multiple Security Vulnerabilities) but has been given its own record to better document it.

WebM libvpx Unspecified Memory Corruption Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WebM libvpx Unspecified Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for more information.

WebM libvpx Unspecified Memory Corruption Vulnerability

References:

• Google Chrome Homepage (Google)
  
• libvpx (WebM)
  
• Stable Channel Update Thursday, November 4, 2010 | 08:31 (Google)