CVE-2015-6823 in FFmpeg

Tóm tắt

Bởi MITRE

The allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted Apple Lossless Audio Codec (ALAC) data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Đặt trước: 05/09/2015
• Tiết lộ: 05/09/2015
• Kiểm duyệt: được chấp nhận
• mục: VDB-77588
• CPE: sẵn sàng
• CWE: CWE-17 (Đã xác nhận)
• CVSS: 7.5 (NVD)
• EPSS: 0.02412
• KEV: không
• Các hoạt động: rất thấp
• ngành: Police, Education, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-6823
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-6823
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-6823/