| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | ≤ 2.4.1 | |
| chrome | ≤ 40.0.2214.85 |
Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free