PT-2013-4971 · FFmpeg · Ffmpeg

Published 2013-12-24 · Updated 2013-12-26 · CVE-2013-4358

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11.4

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is related to alternating bit depths in H.264 data.

Recommendations For versions prior to 0.11.4, update to version 0.11.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2013-4358

Affected Products

Ffmpeg

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4358 · Security Note
• http://ffmpeg.org/security.html · Note
• http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=072be3e8969f24113d599444be4d6a0ed04a6602 · Note