PT-2015-7772 · FFmpeg · Ffmpeg
Publicado
2015-11-26
·
Atualizado
2018-12-21
·
CVE-2015-8364
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
FFmpeg versions prior to 2.6.5
FFmpeg versions 2.7.x prior to 2.7.3
FFmpeg versions 2.8.x through 2.8.2
Description
The issue is related to an integer overflow in the
ff ivi init planes function, which can be triggered by crafted image dimensions in Indeo Video Interactive data. This can lead to a denial of service due to out-of-bounds heap-memory access, and potentially have other unspecified impacts.Recommendations
For FFmpeg versions prior to 2.6.5, update to version 2.6.5 or later.
For FFmpeg versions 2.7.x prior to 2.7.3, update to version 2.7.3 or later.
For FFmpeg versions 2.8.x through 2.8.2, update to a version later than 2.8.2.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ffmpeg