PT-2015-3966 · Google+5 · Google Chrome+5

Publicado

2015-01-21

·

Atualizado

2024-06-15

·

CVE-2014-7933

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.5.1 Google Chrome versions prior to 40.0.2214.91
Description The issue is related to a use-after-free vulnerability in the matroska read seek function. This vulnerability can be triggered by a crafted Matroska file, leading to improper maintenance of tracks data. As a result, remote attackers can cause a denial of service or possibly have other unspecified impacts.
Recommendations For FFmpeg versions prior to 2.5.1, update to version 2.5.1 or later to resolve the issue. For Google Chrome versions prior to 40.0.2214.91, update to version 40.0.2214.91 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2015-1098
CVE-2014-7933
DSA-3189-1
OPENSUSE-SU-2015_0441-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2015:0093
RHSA-2015_0093
USN-2476-1

Produtos afetados

Alt Linux
Ffmpeg
Google Chrome
Red Hat
Suse
Ubuntu