PT-2015-6935 · FFmpeg · Libav

Agostino Sarubbo · Published 2015-10-09 · Updated 2024-06-15 · CVE-2015-5479

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.5

Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a file with crafted dimensions. This is due to a problem in the ff h263 decode mba function.

Recommendations For versions prior to 11.5, update to version 11.5 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2015-5479

DLA-644-1

OPENSUSE-SU-2024:10926-1

USN-2944-1

Affected Products

Libav

References · 24

• https://libav.org/releases/libav-11.5.changelog · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5479 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5479 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-5479 · Security Note
• http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10926-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5479 · Security Note
• http://ubuntu.com/usn/USN-2944-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2944-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2013-7010 · Note
• https://suse.com/security/cve/CVE-2013-0868 · Note
• https://suse.com/security/cve/CVE-2013-0851 · Note
• https://suse.com/security/cve/CVE-2013-0852 · Note
• https://suse.com/security/cve/CVE-2012-6618 · Note
• https://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=0a49a62f998747cfa564d98d36a459fe70d3299b · Note