PT-2015-6935 · FFmpeg · Libav

Agostino Sarubbo · Publicado 2015-10-09 · Atualizado 2024-06-15 · CVE-2015-5479

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.5

Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a file with crafted dimensions. This is due to a problem in the ff h263 decode mba function.

Recommendations For versions prior to 11.5, update to version 11.5 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2015-5479

DLA-644-1

OPENSUSE-SU-2024:10926-1

USN-2944-1

Produtos afetados

Libav

Referências · 24

• https://suse.com/security/cve/CVE-2013-7010 · Nota
• https://suse.com/security/cve/CVE-2013-0868 · Nota
• https://libav.org/releases/libav-11.5.changelog · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-0851 · Nota
• https://suse.com/security/cve/CVE-2013-0852 · Nota
• https://suse.com/security/cve/CVE-2012-6618 · Nota
• https://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=0a49a62f998747cfa564d98d36a459fe70d3299b · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5479 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-3417 · Nota
• https://blogs.gentoo.org/ago/2015/07/16/libav-divide-by-zero-in-ff_h263_decode_mba · Nota
• https://ubuntu.com/security/CVE-2015-5479 · Aviso do Fabricante
• http://securityfocus.com/bid/75932 · Nota
• https://suse.com/security/cve/CVE-2014-9604 · Nota
• https://cve.org/CVERecord?id=CVE-2015-5479 · Nota de Segurança
• http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.html · Aviso do Fabricante