CVE-2015-6823 in FFmpeg

सारांश

द्वारा MITRE

The allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted Apple Lossless Audio Codec (ALAC) data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• आरक्षित करना: 05/09/2015
• प्रकटीकरण: 05/09/2015
• संयम: स्वीकृत
• प्रविष्टि: VDB-77588
• CPE: तैयार
• CWE: CWE-17 (पुष्टि की गई)
• CVSS: 7.5 (NVD)
• EPSS: 0.02412
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Lawfirm, Police, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-6823
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-6823
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-6823/