CVE-2010-4203:WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.

splash
Back

Description Preview

The vulnerability in WebM libvpx (VP8 Codec SDK) before version 0.9.5, as utilized in Google Chrome before version 7.0.517.44, enables remote attackers to trigger a denial of service condition due to memory corruption. This flaw could potentially allow attackers to execute arbitrary code by exploiting invalid frames.

Overview

This CVE describes a vulnerability in the WebM libvpx library, specifically affecting versions prior to 0.9.5. The issue allows remote attackers to exploit invalid frames to cause memory corruption, potentially leading to a denial of service or arbitrary code execution.

Remediation

To remediate this vulnerability, users are advised to update their Google Chrome browser to version 7.0.517.44 or later, which includes the patched version of the WebM libvpx library (0.9.5). It is crucial to keep software up to date to mitigate the risk of exploitation.

References

  1. Secunia Advisory: http://secunia.com/advisories/42690
  2. OVAL Definition: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12198
  3. Google Chrome Releases: http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html
  4. Gentoo GLSA-201101-03: http://security.gentoo.org/glsa/glsa-201101-03.xml
  5. Red Hat RHSA-2010:0999: https://rhn.redhat.com/errata/RHSA-2010-0999.html
  6. VUPEN Advisory ADV-2011-0115: http://www.vupen.com/english/advisories/2011/0115
  7. WebM libvpx Gitweb Changelog: http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=blob%3Bf=CHANGELOG
  8. Chromium Issue Tracker: http://code.google.com/p/chromium/issues/detail?id=60055
  9. Secunia Advisory 42109: http://secunia.com/advisories/42109
  10. Secunia Advisory 42118: http://secunia.com/advisories/42118
  11. Secunia Advisory 42908: http://secunia.com/advisories/42908

Industry ExposureMost to least
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.

  1. Health Care & Social Assistance
    Health Care & Social Assistance
  2. Manufacturing
    Manufacturing
  3. Public Administration
    Public Administration
  4. Transportation & Warehousing
    Transportation & Warehousing
  5. Educational Services
    Educational Services
  6. Arts, Entertainment & Recreation
    Arts, Entertainment & Recreation
  7. Professional, Scientific, & Technical Services
    Professional, Scientific, & Technical Services
  8. Construction
    Construction
  9. Finance and Insurance
    Finance and Insurance
  10. Real Estate Rental & Leasing
    Real Estate Rental & Leasing
  11. Utilities
    Utilities
  12. Wholesale Trade
    Wholesale Trade
  13. Accommodation & Food Services
    Accommodation & Food Services
  14. Administrative, Support, Waste Management & Remediation Services
    Administrative, Support, Waste Management & Remediation Services
  15. Agriculture, Forestry Fishing & Hunting
    Agriculture, Forestry Fishing & Hunting
  16. Information
    Information
  17. Management of Companies & Enterprises
    Management of Companies & Enterprises
  18. Mining
    Mining
  19. Other Services (except Public Administration)
    Other Services (except Public Administration)
  20. Retail Trade
    Retail Trade

Focus on What Matters

  1. See Everything.
  2. Identify True Risk.
  3. Proactively Mitigate Threats.

Let's talk!

background