{
  "schema_version": "1.4.0",
  "id": "GHSA-xcjm-r85p-mrq7",
  "modified": "2025-04-09T04:10:19Z",
  "published": "2022-05-02T03:19:08Z",
  "aliases": [
    "CVE-2009-0893"
  ],
  "details": "Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a \"missing resync marker range check\" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0893"
    },
    {
      "type": "WEB",
      "url": "https://www.it-isac.org/postings/cyber/alertdetail.php?id=4634&selyear=2009&menutype=menupublic"
    },
    {
      "type": "WEB",
      "url": "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c"
    },
    {
      "type": "WEB",
      "url": "http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/decoder.c?r1=1.80&r2=1.81"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/35274"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/35156"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2009/1468"
    },
    {
      "type": "WEB",
      "url": "http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews%5BbackPid%5D=64&tx_ttnews%5Btt_news%5D=7"
    },
    {
      "type": "WEB",
      "url": "http://www.xvid.org/News.64.0.html?&cHash=0170b4e439&tx_ttnews[backPid]=64&tx_ttnews[tt_news]=7"
    }
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2009-06-02T18:30:00Z"
  }
}