ANCHORE-2014-3157

ANCHORE-2014-3157 PUBLISHED

Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.

Affected Products

Vendor	Product	Versions
google	chrome	0, 0, 0

Timeline

Jun 11, 2014 CVE Published
Aug 6, 2024 CVE Updated
Mar 13, 2026 Distribution Patch

References

http://www.debian.org/security/2014/dsa-2959 url
http://googlechromereleases.blogspot.com/2014/06/stable-channel-update.html url
http://secunia.com/advisories/58585 url
http://secunia.com/advisories/59090 url
http://secunia.com/advisories/60061 url
http://secunia.com/advisories/60372 url
http://security.gentoo.org/glsa/glsa-201408-16.xml url
http://www.securityfocus.com/bid/67972 url
https://code.google.com/p/chromium/issues/detail?id=368980 url
https://src.chromium.org/viewvc/chrome?revision=268831&view=revision url

Open in Interactive Console →