CVE-2013-0862 in FFmpeg
Summary
Multiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image dimensions in LucasArts Smush video data, which triggers an out-of-bounds array access.
Reservation
01/07/2013
Disclosure
11/23/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7625 | FFmpeg sanm.c process_frame_obj numeric error | 189 | Not defined | Official fix | CVE-2013-0862 |