PT-2013-4971 · FFmpeg · Ffmpeg

Publicado 2013-12-24 · Atualizado 2013-12-26 · CVE-2013-4358

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11.4

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is related to alternating bit depths in H.264 data.

Recommendations For versions prior to 0.11.4, update to version 0.11.4 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2013-4358

Produtos afetados

Ffmpeg

Referências · 3

• http://ffmpeg.org/security.html · Nota
• http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=072be3e8969f24113d599444be4d6a0ed04a6602 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4358 · Nota de Segurança