Computer Security
[EN] securityvulns.ru no-pyccku


libav / ffmpeg security vulnerabilities
Published:21.06.2015
Source:
SecurityVulns ID:14545
Type:library
Threat Level:
6/10
Description:Memory corruptions in multiple demuxers.
Affected:FFMPEG : FFmpeg 2.6
CVE:CVE-2015-3417 (Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data.)
 CVE-2015-3395 (The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, which triggers an out-of-bounds array access.)
Original documentdocumentDEBIAN, [SECURITY] [DSA 3288-1] libav security update (21.06.2015)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod