Unscored severity · published Feb 23, 2013
CVE-2013-0894
Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 25.0.1364.99; before 25.0.1364.97 · source: NVD
FF
Ffmpeg · Ffmpeg
through 1.1.3 · source: NVD
OP
Opensuse · Opensuse
12.1; 12.2 · source: NVD
UL
Ubuntu Linux · Canonical
12.04; 12.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0894
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0894
git.chromium.org
http://git.chromium.org/gitweb/?p=chromium/deps/ffmpeg.git%3Ba=commit%3Bh=e1e70d9bb9852b7d099379afc95531a632a20ba5
git.videolan.org
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=2c16bf2de07c68513072bf3cc96401d2c6291a3e
googlechromereleases.blogspot.com
http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1790-1
code.google.com
https://code.google.com/p/chromium/issues/detail?id=168473
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability