libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebM video. NOTE: this vulnerability exists because of a regression.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers     to cause a denial of service (out-of-bounds read) via a crafted WebM video. NOTE: this vulnerability     exists because of a regression. (CVE-2010-4489)

Note that Nessus relies on the presence of the package as reported by the vendor.

A buffer overread was fixed in libvpx which could lead to crashes of applications using libvpx.

Chris Evans discovered that libvpx did not properly perform bounds checking. If an application using libvpx opened a specially crafted WebM file, an attacker could cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Google Chrome installed on the remote host is earlier than 8.0.552.215.  Such versions are reportedly affected by multiple vulnerabilities :

  - It may be possible to bypass the pop-up blocker.
    (Issue #17655)

  - A cross-origin video theft vulnerability exists related     to canvas. (Issue #55745)

  - An unspecified crash exists when handling HTML5     databases. (Issue #56237)

  - Excessive file dialogs could lead to a browser crash.
    (Issue #58329)

  - A use after free error exists in history handling.
    (Issue #59554)

  - It may be possible to crash the browser when performing     http proxy  authentication. (Issue #61701)

  - An out-of-bounds read regression exists in the WebM     video support. (Issue #61701)

  - It may be possible to crash the browser due to bad     indexing with malformed video. (Issue #62127)

  - A memory corruption issue exists relating to malicious     privileged extension. (Issue #62168)

  - A use-after-free error exists in the handling of SVG     animations. (Issue #62401)

  - A use-after-free error exists in the mouse dragging     event handling. (Issue #63051)

  - A double free error exists in XPath handling.
    (Issue #63444)

ID	Name	Product	Family	Severity
217355	Linux Distros Unpatched Vulnerability : CVE-2010-4489	Nessus	Misc.	high
74653	openSUSE Security Update : libvpx (openSUSE-SU-2012:0759-1)	Nessus	SuSE Local Security Checks	medium
65102	Ubuntu 10.10 : libvpx vulnerability (USN-1087-1)	Nessus	Ubuntu Local Security Checks	medium
50977	Google Chrome < 8.0.552.215 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-4489

medium

Tenable Plugins

high

medium

medium

high