Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-7020HistoryDec 09, 2013 - 4:36 p.m.
CVE-2013-7020
2013-12-0916:36:49
Debian Security Bug Tracker
security-tracker.debian.org
11
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.021
Percentile
89.1%
The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 11 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 999 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 13 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
Related
openvas
openvas
Debian: Security Advisory (DSA-3027-1)
2014-09-16 00:00:00
Debian Security Advisory DSA 3027-1 (libav - security update)
2014-09-17 00:00:00
Gentoo Security Advisory GLSA 201603-06
2016-03-14 00:00:00
cvelist
cvelist
CVE-2013-7020
2013-12-09 11:00:00
osv
osv
libav - security update
2014-09-17 00:00:00
securityvulns
securityvulns
libav / ffmpeg memory corruption
2014-09-21 00:00:00
[SECURITY] [DSA 3027-1] libav security update
2014-09-21 00:00:00
prion
prion
Out-of-bounds
2013-12-09 16:36:00
cve
cve
CVE-2013-7020
2013-12-09 16:36:49
ubuntucve
ubuntucve
CVE-2013-7020
2013-12-09 00:00:00
nessus
nessus
Debian DSA-3027-1 : libav - security update
2014-09-19 00:00:00
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2014:227)
2014-11-26 00:00:00
GLSA-201603-06 : FFmpeg: Multiple vulnerabilities
2016-03-14 00:00:00
debian
debian
[SECURITY] [DSA 3027-1] libav security update
2014-09-17 19:54:32
nvd
nvd
CVE-2013-7020
2013-12-09 16:36:49
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.021
Percentile
89.1%
Related for DEBIANCVE:CVE-2013-7020