CVE-2014-3157

Google Chrome < 35.0.1916.153 - Heap-Based Buffer Overflow in FFmpegVideoDecoder

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67972
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59090
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2014/06/stable-channel-update.html
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201408-16.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60372
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60061
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58585
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-2959

Scores

EPSS 0.0175
EPSS Percentile 75.1%

Details

CWE
CWE-119
Status published
Products (50)
google/chrome 35.0.1916.0
google/chrome 35.0.1916.1
google/chrome 35.0.1916.2
google/chrome 35.0.1916.3
google/chrome 35.0.1916.4
google/chrome 35.0.1916.5
google/chrome 35.0.1916.6
google/chrome 35.0.1916.7
google/chrome 35.0.1916.8
google/chrome 35.0.1916.9
... and 40 more
Published Jun 11, 2014
Tracked Since Feb 18, 2026