| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | = 23.0.1271.0= 23.0.1271.1= 23.0.1271.10= 23.0.1271.11= 23.0.1271.12= 23.0.1271.13= 23.0.1271.14= 23.0.1271.15= 23.0.1271.16= 23.0.1271.17= 23.0.1271.18= 23.0.1271.19= 23.0.1271.2= 23.0.1271.20= 23.0.1271.21= 23.0.1271.22= 23.0.1271.23= 23.0.1271.24= 23.0.1271.26= 23.0.1271.3= 23.0.1271.30= 23.0.1271.31= 23.0.1271.32= 23.0.1271.33= 23.0.1271.35= 23.0.1271.36= 23.0.1271.37= 23.0.1271.38= 23.0.1271.39= 23.0.1271.4= 23.0.1271.40= 23.0.1271.41= 23.0.1271.44= 23.0.1271.45= 23.0.1271.46= 23.0.1271.49= 23.0.1271.5= 23.0.1271.50= 23.0.1271.51= 23.0.1271.52= 23.0.1271.53= 23.0.1271.54= 23.0.1271.55= 23.0.1271.56= 23.0.1271.57= 23.0.1271.58= 23.0.1271.59= 23.0.1271.6= 23.0.1271.60= 23.0.1271.61= 23.0.1271.62= 23.0.1271.64= 23.0.1271.7= 23.0.1271.8= 23.0.1271.83= 23.0.1271.84= 23.0.1271.85= 23.0.1271.86= 23.0.1271.87= 23.0.1271.88= 23.0.1271.89= 23.0.1271.9= 23.0.1271.91= 23.0.1271.92= 23.0.1271.93= 23.0.1271.94= 23.0.1271.95≤ 23.0.1271.96 | |
| libav | = 0.7= 0.7.1= 0.7.2= 0.7.3= 0.7.4= 0.7.5= 0.7.6= 0.8= 0.8.1= 0.8.2= 0.8.3= 0.8.4 |
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free