CVE-2015-8364 in FFmpeg
摘要 (英语)
Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via crafted image dimensions in Indeo Video Interactive data.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
预定
2015-11-26
披露
2015-11-26
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 79342 | FFmpeg Indeo Video Interactive Data ivi.c ff_ivi_init_planes 远程代码执行 | 189 | 未经证实 | 官方修复 | CVE-2015-8364 |