CVE ID:	CVE-2011-0480
Description:	Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
Test IDs:	1.3.6.1.4.1.25623.1.0.70239
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0480 BugTraq ID: 45788 http://www.securityfocus.com/bid/45788 Debian Security Information: DSA-2306 (Google Search) http://www.debian.org/security/2011/dsa-2306 http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 http://article.gmane.org/gmane.comp.video.ffmpeg.devel/122703 http://osvdb.org/70463 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14380 http://secunia.com/advisories/42951 http://www.ubuntu.com/usn/usn-1104-1/ XForce ISS Database: chrome-vorbis-bo(64671) https://exchange.xforce.ibmcloud.com/vulnerabilities/64671