CVE-2014-9602 in FFmpeg

Sumário (Inglês)

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted X-Face image data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

16/01/2015

Divulgação

16/01/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
68974	FFmpeg Negação de Serviço	189	Não provado	Correção oficial	CVE-2014-9602

Fontes

• MITRE
• NVD
• CVE Details