Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-3675
cve-2013-3675
denial of service
integer overflow
out-of-bounds array access
application crash
lucasarts smush
libavcodec
ffmpeg
9 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
64.5%
The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) via crafted LucasArts Smush video data.
Affected configurations
Node
ffmpegffmpegRange≤1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| ffmpeg:ffmpeg | ffmpeg | le | 1.2 |
Related
prion
prion
Integer overflow
2013-06-10 03:19:00
debiancve
debiancve
CVE-2013-3675
2022-10-03 16:14:46
cvelist
cvelist
CVE-2013-3675
2022-10-03 16:14:46
nvd
nvd
CVE-2013-3675
2013-06-10 03:19:55
ubuntucve
ubuntucve
CVE-2013-3675
2013-06-10 00:00:00
nessus
nessus
GLSA-201310-12 : FFmpeg: Multiple vulnerabilities
2013-10-27 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2013-10-25 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201310-12
2015-09-29 00:00:00
9 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
64.5%
Related for CVE-2013-3675