CVE-2009-0893 - CVE House
Back to Database
Status published Critical CVE-2009-0893

Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library...

Vulnerability Description

Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a "missing resync marker range check" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0893

Credits & Attribution

No credits recorded in the NVD database.

References

More from xvid

View All →
CVE-2009-0894
Heap-based buffer overflow in the decoder_create function in the initialization...
Critical 10
CVE-2007-3329
Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263,...
Medium 6.8

Affected Vendor

Affected Software

xvid
Vulnerable Versions:
0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.2.0

Timeline

Official Publish: June 2nd, 2009
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.