Lucene search
HistoryNov 23, 2013 - 6:55 p.m.
CVE-2013-0865
cve-2013-0865
ffmpeg
libavcodec
vqa_decode_chunk
remote attackers
out-of-bounds write
security vulnerability
6.6 Medium
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
76.2%
The vqa_decode_chunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large (1) cbp0 or (2) cbpz chunk in Westwood Studios VQA Video file, which triggers an out-of-bounds write.
Affected configurations
Node
ffmpegffmpegRange≤1.0.2
ORffmpegffmpegMatch0.3
ORffmpegffmpegMatch0.3.1
ORffmpegffmpegMatch0.3.2
ORffmpegffmpegMatch0.3.3
ORffmpegffmpegMatch0.3.4
ORffmpegffmpegMatch0.4.0
ORffmpegffmpegMatch0.4.2
ORffmpegffmpegMatch0.4.3
ORffmpegffmpegMatch0.4.4
ORffmpegffmpegMatch0.4.5
ORffmpegffmpegMatch0.4.6
ORffmpegffmpegMatch0.4.7
ORffmpegffmpegMatch0.4.8
ORffmpegffmpegMatch0.4.9pre1
ORffmpegffmpegMatch0.5
ORffmpegffmpegMatch0.5.1
ORffmpegffmpegMatch0.5.2
ORffmpegffmpegMatch0.5.3
ORffmpegffmpegMatch0.5.4
ORffmpegffmpegMatch0.5.4.5
ORffmpegffmpegMatch0.5.4.6
ORffmpegffmpegMatch0.6
ORffmpegffmpegMatch0.6.1
ORffmpegffmpegMatch0.6.2
ORffmpegffmpegMatch0.6.3
ORffmpegffmpegMatch0.7
ORffmpegffmpegMatch0.7.1
ORffmpegffmpegMatch0.7.2
ORffmpegffmpegMatch0.7.3
ORffmpegffmpegMatch0.7.4
ORffmpegffmpegMatch0.7.5
ORffmpegffmpegMatch0.7.6
ORffmpegffmpegMatch0.7.7
ORffmpegffmpegMatch0.7.8
ORffmpegffmpegMatch0.7.9
ORffmpegffmpegMatch0.7.11
ORffmpegffmpegMatch0.7.12
ORffmpegffmpegMatch0.8.0
ORffmpegffmpegMatch0.8.1
ORffmpegffmpegMatch0.8.2
ORffmpegffmpegMatch0.8.5
ORffmpegffmpegMatch0.8.5.3
ORffmpegffmpegMatch0.8.5.4
ORffmpegffmpegMatch0.8.6
ORffmpegffmpegMatch0.8.7
ORffmpegffmpegMatch0.8.8
ORffmpegffmpegMatch0.8.10
ORffmpegffmpegMatch0.8.11
ORffmpegffmpegMatch0.9
ORffmpegffmpegMatch0.9.1
ORffmpegffmpegMatch0.10
ORffmpegffmpegMatch0.10.3
ORffmpegffmpegMatch0.10.4
ORffmpegffmpegMatch0.11
ORffmpegffmpegMatch1.0
ORffmpegffmpegMatch1.0.1
ORffmpegffmpegMatch1.1
ORffmpegffmpegMatch1.1.1
Related
cvelist
cvelist
CVE-2013-0865
2013-11-23 18:00:00
nvd
nvd
CVE-2013-0865
2013-11-23 18:55:04
debiancve
debiancve
CVE-2013-0865
2013-11-23 18:55:04
ubuntucve
ubuntucve
CVE-2013-0865
2013-11-23 00:00:00
prion
prion
Out-of-bounds
2013-11-23 18:55:00
openvas
openvas
Debian Security Advisory DSA 2855-1 (libav - several vulnerabilities)
2014-02-05 00:00:00
Debian: Security Advisory (DSA-2855-1)
2014-02-04 00:00:00
Gentoo Security Advisory GLSA 201603-06
2016-03-14 00:00:00
nessus
nessus
Debian DSA-2855-1 : libav - several vulnerabilities
2014-02-06 00:00:00
GLSA-201603-06 : FFmpeg: Multiple vulnerabilities
2016-03-14 00:00:00
debian
debian
[SECURITY] [DSA 2855-1] libav security update
2014-02-05 17:58:48
securityvulns
securityvulns
libav / ffmpeg multiple security vulnerabilities
2014-02-10 00:00:00
[SECURITY] [DSA 2855-1] libav security update
2014-02-10 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00
6.6 Medium
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
76.2%
Related for CVE-2013-0865