ffmpeg -- use-after-free

2014-12-1900:00:00

vuxml.freebsd.org

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.6%

JSON

NVD reports:

Use-after-free vulnerability in the ff_h264_free_tables
function in libavcodec/h264.c in FFmpeg before 2.3.6 allows
remote attackers to cause a denial of service or possibly
have unspecified other impact via crafted H.264 data in an
MP4 file, as demonstrated by an HTML VIDEO element that
references H.264 data.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibav= 11.0UNKNOWN
FreeBSDanynoarchlibav< 11.4UNKNOWN
FreeBSDanynoarchgstreamer1-libav< 1.5.0UNKNOWN
FreeBSDanynoarchhandbrake< 1.2.0UNKNOWN
FreeBSDanynoarchffmpeg= 2.2.0,1UNKNOWN
FreeBSDanynoarchffmpeg< 2.2.12,1UNKNOWN
FreeBSDanynoarchffmpeg25< 2.5.2UNKNOWN
FreeBSDanynoarchffmpeg24< 2.4.5UNKNOWN
FreeBSDanynoarchffmpeg23< 2.3.6UNKNOWN
FreeBSDanynoarchffmpeg1< 1.2.11UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	libav	= 11.0	UNKNOWN
FreeBSD	any	noarch	libav	< 11.4	UNKNOWN
FreeBSD	any	noarch	gstreamer1-libav	< 1.5.0	UNKNOWN
FreeBSD	any	noarch	handbrake	< 1.2.0	UNKNOWN
FreeBSD	any	noarch	ffmpeg	= 2.2.0,1	UNKNOWN
FreeBSD	any	noarch	ffmpeg	< 2.2.12,1	UNKNOWN
FreeBSD	any	noarch	ffmpeg25	< 2.5.2	UNKNOWN
FreeBSD	any	noarch	ffmpeg24	< 2.4.5	UNKNOWN
FreeBSD	any	noarch	ffmpeg23	< 2.3.6	UNKNOWN
FreeBSD	any	noarch	ffmpeg1	< 1.2.11	UNKNOWN