Lucene search

K
cvelistMitreCVELIST:CVE-2013-3675
HistoryJun 10, 2013 - 1:00 a.m.

CVE-2013-3675

2013-06-1001:00:00
mitre
www.cve.org
4
ffmpeg
integer overflow
denial of service
lucasarts smush

AI Score

9.2

Confidence

High

EPSS

0.003

Percentile

71.8%

The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) via crafted LucasArts Smush video data.

AI Score

9.2

Confidence

High

EPSS

0.003

Percentile

71.8%