CVE-2013-3672 in FFmpeg
요약 (영어)
The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted American Laser Games (ALG) MM Video data.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
예약하다
2013. 05. 24.
공개
2013. 06. 09.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 9125 | FFmpeg mmvideo.c mm_decode_inter 권한 상승 | 20 | 정의되지 않음 | 공식 수정 | CVE-2013-3672 |