PT-2015-7377 · FFmpeg · Ffmpeg

Publicado

2015-09-06

·

Atualizado

2018-12-21

·

CVE-2015-6825

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.7.2
Description The issue is related to the ff frame thread init function in libavcodec/pthread frame.c, which mishandles certain memory-allocation failures. This can be exploited by remote attackers using a crafted file, such as an AVI file, to cause a denial of service due to invalid pointer access, or possibly have other unspecified impacts.
Recommendations For versions prior to 2.7.2, update to version 2.7.2 or later to resolve the issue. As a temporary workaround, consider restricting access to files that could potentially exploit this issue until the update is applied.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-6825
DLA-1611-1
MGASA-2016-0018

Produtos afetados

Ffmpeg