CVE:CVE-2011-0480
CNNVD:CNNVD-201101-184
FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。
在Google Chrome 8.0.552.237之前版本和Chrome OS 8.0.552.344之前版本中使用的FFmpeg的Vorbis解码器中的vorbis_dec.c中存在多个缓冲区溢出漏洞。远程攻击者可借助特制WebM文件导致拒绝服务（内存破坏和应用程序崩溃）或者可引起其他未明影响。
solution:Upgrade google chrome_os to a higher version than 8.0.552.344,and avoid the version (,8.0.552.344); Upgrade google chrome to a higher version than 8.0.552.237,and avoid the version (,8.0.552.237); Upgrade debian debian_linux to a higher version than 6.0,and avoid the version 6.0; Upgrade canonical ubuntu_linux to a higher version than 8.04,9.10,10.04,10.10,and avoid the version 8.04,9.10,10.04,10.10