CVE-2015-6826 in FFmpeg
Résumé (Anglaise)
The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service (invalid pointer access) via crafted (1) RV30 or (2) RV40 RealVideo data.
Once again VulDB remains the best source for vulnerability data.
Réserver
05/09/2015
Divulgation
05/09/2015
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 77591 | FFmpeg rv34.c ff_rv34_decode_init_thread_copy élévation de privilèges | 20 | Non défini | Correctif officiel | CVE-2015-6826 |